Overview

overview

10

Static

static

448838b2a6...in.exe

windows7_x64

10

448838b2a6...in.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    448838b2a60484ee78c2198f2c0c9c85.bin

  • Size

    115KB

  • Sample

    201001-qzfk45jwsj

  • MD5

    448838b2a60484ee78c2198f2c0c9c85

  • SHA1

    f2c43a01cabaa694228f5354ea8c6bcf3b7a49b3

  • SHA256

    64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273

  • SHA512

    9e532af06e5f4764529211e8c5c749baa7b01c72f11b603218c3c08d70cf1e732f8d9d81ec257ca247aaa96d1502150a2f402b1b3914780b6344222b007dd53f

Score
10/10
slothfulmediatrojan

Malware Config

Targets

    • Target

      448838b2a60484ee78c2198f2c0c9c85.bin

    • Size

      115KB

    • MD5

      448838b2a60484ee78c2198f2c0c9c85

    • SHA1

      f2c43a01cabaa694228f5354ea8c6bcf3b7a49b3

    • SHA256

      64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273

    • SHA512

      9e532af06e5f4764529211e8c5c749baa7b01c72f11b603218c3c08d70cf1e732f8d9d81ec257ca247aaa96d1502150a2f402b1b3914780b6344222b007dd53f

    Score
    10/10
    trojanslothfulmedia

    • SlothfulMedia

      SlothfulMedia is a malware used by sophisticated threat actors that drops a remote access tool.

      trojanslothfulmedia

    • SlothfulMedia Main Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks