Overview

overview

10

Static

static

10

64d78eec46...73.exe

windows7_x64

10

64d78eec46...73.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    APTSlothfulMedia.7z

  • Size

    51KB

  • Sample

    201226-bvkkhw1jps

  • MD5

    616bc8dba32daaecaec7a8825f4cea03

  • SHA1

    42818bb34b12a54a8051988917b35e9f6f992fd6

  • SHA256

    6b16bcb53be07c25eb852a41dc0fd4d3eea9b5004e85de94b0a811060864d630

  • SHA512

    81d06bc0ecc43f21c93348782d01f626e125731da97f4e2e88a955b045dd3248f0800175f274ea7609584f510526bfa57641286ee3d4639f31a3b7b4f0e73e9d

Score
10/10
slothfulmediatrojan

Malware Config

Targets

    • Target

      64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273

    • Size

      115KB

    • MD5

      448838b2a60484ee78c2198f2c0c9c85

    • SHA1

      f2c43a01cabaa694228f5354ea8c6bcf3b7a49b3

    • SHA256

      64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273

    • SHA512

      9e532af06e5f4764529211e8c5c749baa7b01c72f11b603218c3c08d70cf1e732f8d9d81ec257ca247aaa96d1502150a2f402b1b3914780b6344222b007dd53f

    Score
    10/10
    slothfulmediatrojan

    • SlothfulMedia

      SlothfulMedia is a malware used by sophisticated threat actors that drops a remote access tool.

      trojanslothfulmedia

    • SlothfulMedia Main Payload

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks