General
- Target APTSlothfulMedia.7z
- Size 51KB
- Sample201226-bvkkhw1jps
- SHA256 6b16bcb53be07c25eb852a41dc0fd4d3eea9b5004e85de94b0a811060864d630
- MD5 616bc8dba32daaecaec7a8825f4cea03
- SHA1 42818bb34b12a54a8051988917b35e9f6f992fd6
- SHA512 81d06bc0ecc43f21c93348782d01f626e125731da97f4e2e88a955b045dd3248f0800175f274ea7609584f510526bfa57641286ee3d4639f31a3b7b4f0e73e9d
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273
- Size 115KB
- SHA256 64d78eec46c9ddd4b9a366de62ba0f2813267dc4393bc79e4c9a51a9bb7e6273
- MD5 448838b2a60484ee78c2198f2c0c9c85
- SHA1 f2c43a01cabaa694228f5354ea8c6bcf3b7a49b3
- SHA512 9e532af06e5f4764529211e8c5c749baa7b01c72f11b603218c3c08d70cf1e732f8d9d81ec257ca247aaa96d1502150a2f402b1b3914780b6344222b007dd53f
- MD5 SHA1 SHA512
Score10/10-
SlothfulMedia
SlothfulMedia is a malware used by sophisticated threat actors that drops a remote access tool.
-
SlothfulMedia Main Payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL