Overview

overview

7

Static

static

3dsconv-m.exe

windows7-x64

1

3dsconv-m.exe

windows10-2004-x64

1

3dsconv-m.py

ubuntu-18.04-amd64

7

3dsconv-m.py

debian-9-armhf

1

3dsconv-m.py

debian-9-mips

1

3dsconv-m.py

debian-9-mipsel

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0193598c7ddb9eaf2061fe0461be5d90b49145d5e8217e6ef752701ca8e19d96

  • Size

    4.8MB

  • Sample

    220823-nr9y5aghe6

  • MD5

    1230b7e060a3ff7078a563150329cd99

  • SHA1

    b00b9dd66ad9b713ca763138fa0393b4efa1a329

  • SHA256

    0193598c7ddb9eaf2061fe0461be5d90b49145d5e8217e6ef752701ca8e19d96

  • SHA512

    9d01b8fa16b7e856ecd4fe62f3e90dde5697cd41d2bfe6f15cc7962ddf1d4d8060fbacec05bfa6f5a0486c95f2fe74a433cf96d96d2a32a3ff11e586aaf604e0

  • SSDEEP

    98304:iSk2lHmbyyHFAfZHmw1OiCRbAEhb9AnmL3YhdPjoEXH5l6zzK6CCYoV63N76uLS+:Vk2lH9O2f+RbAEhRAnoYhdPjV3zszKk+

Score
7/10
linux

Malware Config

Targets

    • Target

      3dsconv-m.exe

    • Size

      12.0MB

    • MD5

      e2b08e79a193d2b0c9645907148e5457

    • SHA1

      e42621b23fc5603ef9e6b286d30b4ac496e0f5a0

    • SHA256

      82095195209ebe4fda467c27c51b5012e252d87584a02eb04c5521a4e2536471

    • SHA512

      fc814bdb340cbc12772645bf576b56d9ed495b644720894220e331a55f4ba857f2e7ab9bf6c02fac5a9ac91b5eacdfeda1165589ea1eeb48425ca7feb4637b50

    • SSDEEP

      196608:mEwLDAqrlNAGY2hHfgNRJOule++dwyVgf8Zpz0:mEwLDAqrlNAGvH8Cule++dwyVgkZpo

    Score
    1/10
    behavioral1behavioral2

    • Target

      3dsconv-m.py

    • Size

      20KB

    • MD5

      99d0627dadf2006943401bc9cd9784f4

    • SHA1

      69d90b223799cd40379bec5c526a05f8e04e920c

    • SHA256

      0100181fdff058b47c9698bb3e14de082736afbb57a70fd0cc7e78a8682c2b9b

    • SHA512

      6f2697879876374749ddb547ba69cd1ed367513c645ee92b9389a237e8b557030106ed1260856726c71fe0bf17eb4ba3e072eeb365b2f84432108a4050904ed5

    • SSDEEP

      384:osvneCHaTCkW/FpY2DCzd0mMJ/u3/RcALoWBHC2l:oSnenTCk2FpY20u/woWBHC2l

    Score
    7/10

    • Write file to user bin folder

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral3behavioral4behavioral5behavioral6

MITRE ATT&CK Enterprise v6

Tasks