General

  • Target

    setup.exe

  • Size

    531KB

  • Sample

    211022-rfdnbscfcj

  • MD5

    531859d25e1815f8595dd0cda1a733a0

  • SHA1

    d798fb451f30876c836638c34105adc532f13b68

  • SHA256

    9f938810193f95c23445c8d39fed8fda7eb28d831455c58daea9c85f70f28be7

  • SHA512

    d8edeb31ddc6ffa40214bf9528271b957c56f33257c650c575d0533a65223d886bacd05192cad2f6637aab5ec96e906469bd2f576999f88c8f2111a17b4877a2

Score
10/10

Malware Config

Targets

    • Target

      setup.exe

    • Size

      531KB

    • MD5

      531859d25e1815f8595dd0cda1a733a0

    • SHA1

      d798fb451f30876c836638c34105adc532f13b68

    • SHA256

      9f938810193f95c23445c8d39fed8fda7eb28d831455c58daea9c85f70f28be7

    • SHA512

      d8edeb31ddc6ffa40214bf9528271b957c56f33257c650c575d0533a65223d886bacd05192cad2f6637aab5ec96e906469bd2f576999f88c8f2111a17b4877a2

    Score
    10/10
    • Detected phishing page

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks