Overview

overview

8

Static

static

??????????...om.exe

windows7_x64

8

??????????...om.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    菲律宾从事博彩行业秘诀话术JPG（压缩版）.7z

  • Size

    288KB

  • Sample

    210620-bl5enqmf4x

  • MD5

    aa27a5dde2212f53ebe1080371d44aca

  • SHA1

    9fea779c37b6c1683403bf933a47064d145a5d1b

  • SHA256

    7532ed7d1be8bb32bf47cb9cf4a585b70d2be27f46bff955a878ade20a5d7465

  • SHA512

    784eeb54de849f0350726afc2b049b561aa3f167cf55cdcf1dd91a231c33763a3abc40ddc6baa4ed50a3604f96aae76ab1ecb1156e0809b0d9ba06c4cc90f77d

Score
8/10

Malware Config

Targets

    • Target

      ?????????????JPG?????.com

    • Size

      1.3MB

    • MD5

      38f4f7abbcc1860e23c23a6918f44cda

    • SHA1

      f3d3429fd5add2509ce5af0b42d24b01e1e161ee

    • SHA256

      f1412515481a806ff3350065c8fc0c4c667b1545738deadbf5a1e18291147e48

    • SHA512

      1b1a5c990a2eddfa0ad07d25cafd1144114ed5a78994da202cc29e018c50759f14638d970c7e82e95a8e2093c46161f3af034c4368847cd9ab697308bf35c758

    Score
    8/10

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks