Overview

overview

10

Static

static

10

test

windows7_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    243_BIO_SINOPHARM.exe

  • Size

    4.7MB

  • Sample

    201209-mxcxpfvz9e

  • MD5

    49a34cfbeed733c24392c9217ef46bb6

  • SHA1

    fbe27e84dd553477894242844652a30eb7d713bc

  • SHA256

    f36a0ee7f4ec23765bb28fbfa734e402042278864e246a54b8c4db6f58275662

  • SHA512

    bc939a0b0c8472a3388ccbf298983d6d720e1c740f0f61008713a357b909743e3b1bb3b618f048a25fb95b8b5d8d159e593e5876a4bed0f0e95c7ffa9783ebcd

Score
10/10
zebrocy

Malware Config

Extracted

Family

zebrocy

C2

/managment/cb-secure/technology.php

Targets

    • Target

      243_BIO_SINOPHARM.exe

    • Size

      4.7MB

    • MD5

      49a34cfbeed733c24392c9217ef46bb6

    • SHA1

      fbe27e84dd553477894242844652a30eb7d713bc

    • SHA256

      f36a0ee7f4ec23765bb28fbfa734e402042278864e246a54b8c4db6f58275662

    • SHA512

      bc939a0b0c8472a3388ccbf298983d6d720e1c740f0f61008713a357b909743e3b1bb3b618f048a25fb95b8b5d8d159e593e5876a4bed0f0e95c7ffa9783ebcd

    Score
    10/10

    • Executes dropped EXE

    • Deletes itself

    • JavaScript code in executable

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks