Overview

overview

10

Static

static

DOCUMENTS.exe

windows7_x64

10

DOCUMENTS.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6ea211b08ac50278feea0a94906d6902b952e97c0d94b38ea683c20c1b1fdc4

  • Size

    406KB

  • Sample

    220521-bmrwjafbdj

  • MD5

    98ab7a12ffeac2eec56fde257af77542

  • SHA1

    45bb0fd79900557f3917e94e9c1a000069e2282c

  • SHA256

    e6ea211b08ac50278feea0a94906d6902b952e97c0d94b38ea683c20c1b1fdc4

  • SHA512

    af0d56762613e4490417a6b78b21e9c47a92feb4d241bd499e4254c7c11561c695eb31d8731c664f548a706926d529e44af52240673136c1880e06d8d64c6fb2

Score
10/10
coreentityrezer0

Malware Config

Targets

    • Target

      DOCUMENTS.exe

    • Size

      461KB

    • MD5

      12d57069130c72bacbe0687b79d633e8

    • SHA1

      5dd72d6f4361861559721e161414e2355dacefe9

    • SHA256

      d887251ccd6c44329798ec262da14733ab9573b28ef725e31834d8b79e9f840d

    • SHA512

      d6320b3362140a7105917626443ae52e7cbcbcde4ef9cc7be0af82c977509009ebfdf0c3b99a5455f4387a87ea5d6c1363eecaf026033d9cc0d5565981763410

    Score
    10/10
    coreentityrezer0

    • CoreEntity .NET Packer

      A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

      coreentity

    • ReZer0 packer

      Detects ReZer0, a packer with multiple versions used in various campaigns.

      rezer0
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks