Overview

overview

10

Static

static

111ab6aa14...0d.dll

windows7_x64

10

111ab6aa14...0d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    111ab6aa14ef1f8359c59b43778b76c7be5ca72dc1372a3603cd5814bfb2850d

  • Size

    107KB

  • Sample

    220124-gqnk6sdbf2

  • MD5

    42b9f65fda3cbb613f726c9a4f26069e

  • SHA1

    71f337dc65459027f4ab26198270368f68d7ae77

  • SHA256

    111ab6aa14ef1f8359c59b43778b76c7be5ca72dc1372a3603cd5814bfb2850d

  • SHA512

    7535e699bf635c87523e014eee62dae61f3545e908ef23e864635f0c39b115a55c2ce87ba120123d82739070a63de3adbdfbd9153c973260e6cfcd15da31fbb2

Score
10/10
golddragonbackdoor

Malware Config

Targets

    • Target

      111ab6aa14ef1f8359c59b43778b76c7be5ca72dc1372a3603cd5814bfb2850d

    • Size

      107KB

    • MD5

      42b9f65fda3cbb613f726c9a4f26069e

    • SHA1

      71f337dc65459027f4ab26198270368f68d7ae77

    • SHA256

      111ab6aa14ef1f8359c59b43778b76c7be5ca72dc1372a3603cd5814bfb2850d

    • SHA512

      7535e699bf635c87523e014eee62dae61f3545e908ef23e864635f0c39b115a55c2ce87ba120123d82739070a63de3adbdfbd9153c973260e6cfcd15da31fbb2

    Score
    10/10
    golddragonbackdoor

    • GoldDragon

      GoldDragon is a second-stage backdoor attributed to Kimsuky.

      backdoorgolddragon

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks