Overview

overview

10

Static

static

soa.exe

windows7_x64

10

soa.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12d7d5a2a3c4063d94fd782ee7fbf4d5c52750b40ca1bc185d28a126664a0b3a

  • Size

    406KB

  • Sample

    220521-bx95vsfgbm

  • MD5

    1f83055547c804e0d4faa1b1c51b47d4

  • SHA1

    85e3d0e2fb2a08361c2590e520eacc309294f277

  • SHA256

    12d7d5a2a3c4063d94fd782ee7fbf4d5c52750b40ca1bc185d28a126664a0b3a

  • SHA512

    566a3e384cfaed2e37998ca1968b180bcb58551c34b2cf8cbb81b66c168a0e41282d6a030f8a4aff4b4f90569f627ade557ca087bdceac9803835f88926d5801

Score
10/10
coreentityrezer0

Malware Config

Targets

    • Target

      soa.exe

    • Size

      461KB

    • MD5

      12d57069130c72bacbe0687b79d633e8

    • SHA1

      5dd72d6f4361861559721e161414e2355dacefe9

    • SHA256

      d887251ccd6c44329798ec262da14733ab9573b28ef725e31834d8b79e9f840d

    • SHA512

      d6320b3362140a7105917626443ae52e7cbcbcde4ef9cc7be0af82c977509009ebfdf0c3b99a5455f4387a87ea5d6c1363eecaf026033d9cc0d5565981763410

    Score
    10/10
    coreentityrezer0

    • CoreEntity .NET Packer

      A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

      coreentity

    • ReZer0 packer

      Detects ReZer0, a packer with multiple versions used in various campaigns.

      rezer0
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks