Overview

overview

10

Static

static

10

Dead Risin...un.exe

windows7_x64

8

Dead Risin...un.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    794dd2330010e587e98a35b55f5637192e585d14cf759c49c5d59af6985b8354

  • Size

    4.3MB

  • Sample

    220520-e3r31shhg6

  • MD5

    1dd4a0265e0e3f3a88fa8e4fa964688c

  • SHA1

    a140410fdf92bba968ac1f6247506e5db6214397

  • SHA256

    794dd2330010e587e98a35b55f5637192e585d14cf759c49c5d59af6985b8354

  • SHA512

    23d616903dfefaa8543245a1914b5bc5ab0cac4fc057c644af564ee6b56a6aed287cf2a0f2808e4ae7d29105a31ed5600cf0b4e92a5836db48c129b372f07341

Score
10/10
bazarbackdoor

Malware Config

Targets

    • Target

      Dead Rising 4 V3.0.1.2 Trainer +10 MrAntiFun.EXE

    • Size

      4.5MB

    • MD5

      6b9ca8364ec6156c290efee44fcdc00b

    • SHA1

      e6423b1275e1e7d05235349acde61d0792497e3d

    • SHA256

      35eac12914408c58b4985e3db398c6942546a3495bff5e20230736fee684e1a0

    • SHA512

      db9e17b3c6a422a215bec89ce2ce0e3d8e4dae2417837cd232a7f48ef98ae0f68690fd0c398e56cbaa01dfaf2e994ce8b5eabcfa0f05b53878295ae78fb2e189

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks