Overview

overview

8

Static

static

??????????...om.exe

windows7_x64

8

??????????...om.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    曝光菲律宾易彩公司女财务被轮奸致死视频流出.7z

  • Size

    288KB

  • Sample

    210620-ca47rp9tmn

  • MD5

    6c2209564f34c31036cadbeef9acb7c2

  • SHA1

    3e71cab53cf46218e56fa7558a1497f575d75d0a

  • SHA256

    29966289cf9e248c29cc976fe76daaccce7d6fbb3b6903ebc3e4f9a0d63a7bd2

  • SHA512

    acd4b3cf877fe2078f25a8b83114a6fdaf909d82910b78969ba38e39d4db5a148b2c6b3be344d5bd28761fffd8ca0b63ec92e70dcf4894ed82c063ce54096c42

Score
8/10

Malware Config

Targets

    • Target

      ?????????????????????.com

    • Size

      1.3MB

    • MD5

      38f4f7abbcc1860e23c23a6918f44cda

    • SHA1

      f3d3429fd5add2509ce5af0b42d24b01e1e161ee

    • SHA256

      f1412515481a806ff3350065c8fc0c4c667b1545738deadbf5a1e18291147e48

    • SHA512

      1b1a5c990a2eddfa0ad07d25cafd1144114ed5a78994da202cc29e018c50759f14638d970c7e82e95a8e2093c46161f3af034c4368847cd9ab697308bf35c758

    Score
    8/10

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks