Overview

overview

8

task1

 

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56bb78c724fd0859c5350bd16ea2383fc4f8715fa389f7a4ec4df560ce5f9792

  • Size

    183KB

  • Sample

    191213-valqpjagqx

  • MD5

    578076ee3a1898ab03e4e4da07268804

  • SHA1

    d4f8e862398f634f26df1374d1f243313cbc450d

  • SHA256

    56bb78c724fd0859c5350bd16ea2383fc4f8715fa389f7a4ec4df560ce5f9792

  • SHA512

    66774dc13ca6bbfd616ae4bcdc9faa90a6485c8a5af92765272d4fa2212e73b7839b784d638aff84be9a2e772667634e0533d304e79731e4c4482c2798dc6f8e

Score
8/10

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

https://bahcelievler-rotary.org/wp-admin/x4PHK0/
exe.dropper

https://sageth.net/wp-content/fu9yz/
exe.dropper

https://newlandred.com/wp-snapshots/CsfcooA/
exe.dropper

https://hellothuoctot.com/wp-content/VzMjXw/
exe.dropper

http://www.enegix.com/wp-includes/21fap/

Targets

    • Target

      56bb78c724fd0859c5350bd16ea2383fc4f8715fa389f7a4ec4df560ce5f9792

    • Size

      183KB

    • MD5

      578076ee3a1898ab03e4e4da07268804

    • SHA1

      d4f8e862398f634f26df1374d1f243313cbc450d

    • SHA256

      56bb78c724fd0859c5350bd16ea2383fc4f8715fa389f7a4ec4df560ce5f9792

    • SHA512

      66774dc13ca6bbfd616ae4bcdc9faa90a6485c8a5af92765272d4fa2212e73b7839b784d638aff84be9a2e772667634e0533d304e79731e4c4482c2798dc6f8e

    Score
    8/10

    • Executes dropped EXE

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    task1

MITRE ATT&CK Enterprise v6

Tasks