Overview

overview

10

Static

static

Al-Mansoor...DF.exe

windows7_x64

10

Al-Mansoor...DF.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2fc9aa53f4f13578d6e72eed7336764dc4d9c9b2079d7896dcbd8f8c7e711a3

  • Size

    859KB

  • Sample

    220521-pdvsqaacfq

  • MD5

    3383db1135b7dfc2d4f423f24d7ca47c

  • SHA1

    acf054b1779789637695948e79936d49c0be4c1c

  • SHA256

    f2fc9aa53f4f13578d6e72eed7336764dc4d9c9b2079d7896dcbd8f8c7e711a3

  • SHA512

    74bb9bc9ea4c4035960a20716118c88f48fd4e7128a8d011aaf2dd1994c129039a03f64d4163827970226af5b42a6e66e3cd92876b67afc898ccddf99cac25d5

Score
10/10
coreentityrezer0

Malware Config

Targets

    • Target

      Al-Mansoor _Quote_Order CAYAN LISTS14_PDF.exe

    • Size

      935KB

    • MD5

      5445d45c4c5055033ab93973240c2e14

    • SHA1

      e8fd33792d1ed321f8acf05c52ca79f29b60dc59

    • SHA256

      565d56fb2be1977b8189a0d31222abb99e72d84d777b4253f63bca44ce0535d7

    • SHA512

      35bc3c9de1b84e0b02a6dd1d5e8d34a6b6ddf4b45b5fcf0260bb7bbb5abf8a980ae1a00486363480976afa708e5f46a5babdaf5838fdd2dc8de1dd8922132075

    Score
    10/10
    coreentityrezer0

    • CoreEntity .NET Packer

      A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

      coreentity

    • ReZer0 packer

      Detects ReZer0, a packer with multiple versions used in various campaigns.

      rezer0
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks