Overview

overview

8

task1

 

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0

  • Size

    165KB

  • Sample

    191212-mqqw75gcsj

  • MD5

    cc7d6d8e28fce962e81a6ba5c82f29bb

  • SHA1

    c9aa3a171e86a9ddb186dcd2c092095ad4bd3df3

  • SHA256

    5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0

  • SHA512

    81d6766797cb0e3e641c56dadc5cd15fa5aa1365d818f7f48ab65690264e92c11a234b077ad76559d8d24e29485e3ec27448dc155013c6f8a8d3595adf71cfb6

Score
8/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://acqua.solarcytec.com/rtsbgs/XiWmtYYur/
exe.dropper

https://blog.learncy.net/wp-admin/user/oxZqQp/
exe.dropper

http://hospitalsanrafael.ainimedina.com/wp-includes/vwf-i8ge-4445917/
exe.dropper

https://sg771.kwikfunnels.com/phpmyadmin_bck/x9tfn-lv1h4-174129596/
exe.dropper

http://www.siyinjichangjia.com/wp-content/WYszsP/

Targets

    • Target

      5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0

    • Size

      165KB

    • MD5

      cc7d6d8e28fce962e81a6ba5c82f29bb

    • SHA1

      c9aa3a171e86a9ddb186dcd2c092095ad4bd3df3

    • SHA256

      5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0

    • SHA512

      81d6766797cb0e3e641c56dadc5cd15fa5aa1365d818f7f48ab65690264e92c11a234b077ad76559d8d24e29485e3ec27448dc155013c6f8a8d3595adf71cfb6

    Score
    8/10

    • Executes dropped EXE

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    task1

MITRE ATT&CK Enterprise v6

Tasks