General

  • Target

    0ce4a54054f46b779e57efe626bdf09934f7131634a4b072efbfb2a3cc665bc5

  • Size

    829KB

  • Sample

    220807-aydbvacgak

  • MD5

    4e06375eab07f84dbb43df1d8b036f0e

  • SHA1

    2f371336c4c5d460151f9b1217a4c7e859513817

  • SHA256

    0ce4a54054f46b779e57efe626bdf09934f7131634a4b072efbfb2a3cc665bc5

  • SHA512

    a71a8276ced073b2de2762d5b548e4d598bfb3d8f87ed5b7d2767569a3ce1193a9850605ed61bc1a3aa20f41bb8c6980b0064323e2b0f43390687050cc61949e

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

112.74.105.11:1438

Targets

    • Target

      webɨ����/Interop.SHDocVw.dll

    • Size

      152KB

    • MD5

      9b1dfce6e9e12ca0f78ef7ca4252f132

    • SHA1

      7c8c7e6509a21c5d055cac43ab92d6050f469da2

    • SHA256

      7d03ae76b570d69f587aaa927e90a2cf47c96f7a7783e3db6cccb92bb4098310

    • SHA512

      4bacbc2b85fe98bc113d70fbf395dbe37459a87bd05b0da03a0e9c55ae7505c95ab1ad9196dd0c03d2f23c81d5071dd9daf1614ce09433844571d77bb0ebbbaf

    Score
    1/10
    • Target

      webɨ����/WebCruiserWVS.Patched.exe

    • Size

      627KB

    • MD5

      2f0176d712415147968dd6058273f350

    • SHA1

      9867b7e363e6ba4ea2eba6955dcc01bc95f793d7

    • SHA256

      01cf72eba397d77ef50866eaaf5b5bc365d712b5feec56e102fa84b36628b6dc

    • SHA512

      b781bc9b14712bf51e27c4b11d527883988a570f3b0c591d9eab057338f13ec59532a5be304b683783dca03793ae52564a551c8d61e112db8957e7b6665bd102

    Score
    1/10
    • Target

      webɨ����/WebCruise���İ�.exe

    • Size

      803KB

    • MD5

      a32707fbf2dab48bbf6d02d27a25838c

    • SHA1

      b0ad74899d091b6bb071cd2f0677661c54f54b74

    • SHA256

      bf089650c31503f5121afb06c2d09daa3a54fcfcde8d08bbe8bbe075fc480f05

    • SHA512

      72661136884459df1e2c89cbade2c8d0b5fb2eabe0d982cca5bfd56f73de695fb8bfd4139c2e714f5ab8cbe7cdef52113c0006f292870c73c3518518b27f8019

    Score
    1/10

MITRE ATT&CK Matrix

Tasks