General

  • Target

    2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

  • Size

    69KB

  • Sample

    220104-gde39saebq

  • MD5

    ba2b85a44c23769cc557586d9269996d

  • SHA1

    7ec436400772e3a1ee77ac99fb7fdb5679484ce3

  • SHA256

    2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

  • SHA512

    3032f4e80e69831701e36c72230743e722e886376a526f047b2bd006a4d684f3f8a1c4d7eb8867536ed3a697c19f51ece1bb2c8ccbeda333d2eb38088a187183

Malware Config

Targets

    • Target

      2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

    • Size

      69KB

    • MD5

      ba2b85a44c23769cc557586d9269996d

    • SHA1

      7ec436400772e3a1ee77ac99fb7fdb5679484ce3

    • SHA256

      2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

    • SHA512

      3032f4e80e69831701e36c72230743e722e886376a526f047b2bd006a4d684f3f8a1c4d7eb8867536ed3a697c19f51ece1bb2c8ccbeda333d2eb38088a187183

    • Detect PurpleFox Dropper

      Detect PurpleFox Dropper.

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

    • suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P

      suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P

    • suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download

      suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks