2d288f2cd6752a01360f2669959e2c61f676f8156d5cc40d4b415245ae04cf6d

Resubmissions

28/01/2022, 12:16

220128-pflylaccar10

22/01/2022, 08:05

220122-jyv2bsaddr10

Sharing

Copy URL Twitter E-mail

General

Target
3ec149660a6808f711ca6cb6b20c1dda.exe
Size 658KB
Sample220128-pflylaccar
SHA256 2d288f2cd6752a01360f2669959e2c61f676f8156d5cc40d4b415245ae04cf6d
MD5 3ec149660a6808f711ca6cb6b20c1dda
SHA1 45c3d1d8dd512c01fd6c897c67b35c13c49828cb
SHA512 3a15e7bfbabeb296001086453320a133dc242ef170ccf45d459d2a7f402fadfe3329099d79b368416d565ba0c16eb051b64fe7b756c21f822ab49ec483b5649d
MD5 SHA1 SHA512

Score

10^/10

suricata

Malware Config

Targets

- Target
  3ec149660a6808f711ca6cb6b20c1dda.exe
- Size 658KB
- SHA256 2d288f2cd6752a01360f2669959e2c61f676f8156d5cc40d4b415245ae04cf6d
- MD5 3ec149660a6808f711ca6cb6b20c1dda
- SHA1 45c3d1d8dd512c01fd6c897c67b35c13c49828cb
- SHA512 3a15e7bfbabeb296001086453320a133dc242ef170ccf45d459d2a7f402fadfe3329099d79b368416d565ba0c16eb051b64fe7b756c21f822ab49ec483b5649d
- MD5 SHA1 SHA512
Score

10^/10

suricata
- suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P
  suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P
  suricata
- suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download
  suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download
  suricata
- suricata: ET MALWARE PurpleFox Backdoor/Rootkit Download Request M1
  suricata: ET MALWARE PurpleFox Backdoor/Rootkit Download Request M1
  suricata
- suricata: ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1
  suricata: ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1
  suricata
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P

suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download

suricata: ET MALWARE PurpleFox Backdoor/Rootkit Download Request M1

suricata: ET MALWARE PurpleFox Backdoor/Rootkit Download Server Response M1

Executes dropped EXE

Checks computer location settings

Drops startup file

Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2