Overview

overview

8

task1

 

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    918b8d165836e26ba2c38b5ea59b140cd7dd7d41244feedcc11856de22af244d

  • Size

    70KB

  • Sample

    191209-qs8bh22x9a

  • MD5

    9d7f3caa367ce2f658699461660b4254

  • SHA1

    c72912090de408f923f8175ae915015626ad9d9c

  • SHA256

    918b8d165836e26ba2c38b5ea59b140cd7dd7d41244feedcc11856de22af244d

  • SHA512

    56b0e1b02b5d074e3a82629af659f543776761dc48dc4f2a241f351f102ddc69c7fa04de5e671747b47acceba9bac6b16b41dc6f4b7ae327766d9a083e74826c

Score
8/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://www.alfalah-ent.com/cms/a7rwpyxb9-k33-1101120868/
exe.dropper

https://raasset.com/x/crHctWU/
exe.dropper

http://alexandrearealty.com/tmp/OyjFYg/
exe.dropper

http://mehuaedxb.com/css/qIkFIs/
exe.dropper

http://mosaiclabel.com/4f9xnykaf/amz4jg4-x3i-459569728/

Targets

    • Target

      918b8d165836e26ba2c38b5ea59b140cd7dd7d41244feedcc11856de22af244d

    • Size

      70KB

    • MD5

      9d7f3caa367ce2f658699461660b4254

    • SHA1

      c72912090de408f923f8175ae915015626ad9d9c

    • SHA256

      918b8d165836e26ba2c38b5ea59b140cd7dd7d41244feedcc11856de22af244d

    • SHA512

      56b0e1b02b5d074e3a82629af659f543776761dc48dc4f2a241f351f102ddc69c7fa04de5e671747b47acceba9bac6b16b41dc6f4b7ae327766d9a083e74826c

    Score
    8/10

    • Executes dropped EXE

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    task1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks