Resubmissions

10-08-2023 17:03

230810-vktf5ahb8w 8

10-08-2023 16:18

230810-tsd6qseh75 5

12-10-2021 18:50

211012-xg8gzschfq 10

12-10-2021 18:01

211012-wl6zaacffq 10

06-10-2021 20:46

211006-zkl49sbhbq 10

05-10-2021 18:43

211005-xde19sacb2 10

04-10-2021 21:53

211004-1rxd9ahae5 1

General

  • Target

    ycof.exe

  • Size

    1.1MB

  • Sample

    211006-zkl49sbhbq

  • MD5

    54a3bcca6b1eb92adb299a46df941826

  • SHA1

    6988e010056d88985b8e8f8de06706327779d3ca

  • SHA256

    c4ab81d7b7d44dd6dfc4f2b69dbe3f22fbf23c1ae49ab8edac2d26f85ae4514d

  • SHA512

    4e4f10abf8a97f649060cb3eaa125a487141a42b87d2dc1449d87531d927031279bd7b48a3859ffa8f5d4400deea77022ecb00c61de8511756dc9c0d27e3f150

Score
10/10

Malware Config

Targets

    • Target

      ycof.exe

    • Size

      1.1MB

    • MD5

      54a3bcca6b1eb92adb299a46df941826

    • SHA1

      6988e010056d88985b8e8f8de06706327779d3ca

    • SHA256

      c4ab81d7b7d44dd6dfc4f2b69dbe3f22fbf23c1ae49ab8edac2d26f85ae4514d

    • SHA512

      4e4f10abf8a97f649060cb3eaa125a487141a42b87d2dc1449d87531d927031279bd7b48a3859ffa8f5d4400deea77022ecb00c61de8511756dc9c0d27e3f150

    Score
    10/10
    • Zloader, Terdot, DELoader, ZeusSphinx

      Zloader is a malware strain that was initially discovered back in August 2015.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks