General

  • Target

    91b65ad077ec685c08e0c7cdc3697e513ecc53f8aaddad9119acb922dac7a361

  • Size

    725KB

  • Sample

    220924-ps182scfap

  • MD5

    48f88d8acae075ed614aaa3fe0db623f

  • SHA1

    a6a74ca03d1a86b6bf25fbc7263ccf261c6bc889

  • SHA256

    91b65ad077ec685c08e0c7cdc3697e513ecc53f8aaddad9119acb922dac7a361

  • SHA512

    ff7f3359426b0bf1c27e2314a607b430f20deef446818e0ed840bcf24a4d659a45481797b7bd493e3b3db0c528ab30d22d513e304893e696b92fd680ec7eecf3

  • SSDEEP

    768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

Score
8/10

Malware Config

Targets

    • Target

      91b65ad077ec685c08e0c7cdc3697e513ecc53f8aaddad9119acb922dac7a361

    • Size

      725KB

    • MD5

      48f88d8acae075ed614aaa3fe0db623f

    • SHA1

      a6a74ca03d1a86b6bf25fbc7263ccf261c6bc889

    • SHA256

      91b65ad077ec685c08e0c7cdc3697e513ecc53f8aaddad9119acb922dac7a361

    • SHA512

      ff7f3359426b0bf1c27e2314a607b430f20deef446818e0ed840bcf24a4d659a45481797b7bd493e3b3db0c528ab30d22d513e304893e696b92fd680ec7eecf3

    • SSDEEP

      768:rZmchlXKGREW6VA6joSRhFH+C9Pe2auEqainmngYWxuv8Gwmwoe9R4ZstojtfcWv:schl6M+lpDCUoHid0bIrlyR

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks