Overview

overview

10

Static

static

39e312a1f6...a8.exe

windows7_x64

8

39e312a1f6...a8.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39e312a1f6f2cf09306053aa615e35c8ebd0069ad68184f4a58a3171ec9baea8

  • Size

    479KB

  • Sample

    220328-ww4a5shddr

  • MD5

    0033775eeaddc98cdb766102431dd418

  • SHA1

    02a6b365eb89b1430999d9ef1c275ad4ff5b7068

  • SHA256

    39e312a1f6f2cf09306053aa615e35c8ebd0069ad68184f4a58a3171ec9baea8

  • SHA512

    f223d0dca23c9cec72d2f479c8212981268379e95f3bcce42db8b346441428016997d1ceeaa66eafc65b9db3fa4c9ccd068049526af99372ed1f8664d72735cf

Score
10/10
ostapdownloaderpersistence

Malware Config

Targets

    • Target

      39e312a1f6f2cf09306053aa615e35c8ebd0069ad68184f4a58a3171ec9baea8

    • Size

      479KB

    • MD5

      0033775eeaddc98cdb766102431dd418

    • SHA1

      02a6b365eb89b1430999d9ef1c275ad4ff5b7068

    • SHA256

      39e312a1f6f2cf09306053aa615e35c8ebd0069ad68184f4a58a3171ec9baea8

    • SHA512

      f223d0dca23c9cec72d2f479c8212981268379e95f3bcce42db8b346441428016997d1ceeaa66eafc65b9db3fa4c9ccd068049526af99372ed1f8664d72735cf

    Score
    10/10
    persistenceostapdownloader

    • ostap

      Ostap is a JS downloader, used to deliver other families.

      downloaderostap

    • Blocklisted process makes network request

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks