General

  • Target

    DDOSIA (1).zip

  • Size

    4.2MB

  • Sample

    221026-zpynvshae2

  • MD5

    2fbe5e82dc18413a78459d05bc79de1c

  • SHA1

    fb19cb9fbc853a2c63a1ba2447ed60e311c6bb1b

  • SHA256

    0eac867031b07ce9da91a8a0f2028c6fbdd784f0944f963d880106bb259fae9d

  • SHA512

    f16bf507e51a7c10e064c683f8f24a91bbe96f979b14b819878ddeaf6ed5aa4229787fe3f1049aad9e41cc7042801dc679bb9a541b07fd671b37238346fe5761

  • SSDEEP

    98304:UT3yvKAyKqLbO+IJU0MlSY4eule36m7cPyV+mtD3QyX:KiyhbOVzMn4zlE6m72K1

Score
9/10

Malware Config

Targets

    • Target

      linux/Dosia.py

    • Size

      72KB

    • MD5

      1afa90293565a1e2a72d5062c1674451

    • SHA1

      e786c3a60e591dec8f4c15571dbb536a44f861c5

    • SHA256

      1b1eb5652aafcb76fd53ca368d30fc255b5fc495236bfa6a1598caff5502a4aa

    • SHA512

      f751aede89bcd3988b7eb61cd8d4aed4c2709657faf0378e58dfd294c463f702e1b9fc331c8c31bc75f269dd454c49d466961af907385a0ed10b0855b1fed415

    • SSDEEP

      1536:EgjArN4W91+JlHJqE2PJAHPKyHb4h5Ft4pItFAUiYdtz/M5HzzvTKx9F4pXg+J8y:m7E2UKM4h5Ft4kNM5HDVpXIy

    Score
    3/10
    • Target

      macOS/Dosia.py

    • Size

      72KB

    • MD5

      1afa90293565a1e2a72d5062c1674451

    • SHA1

      e786c3a60e591dec8f4c15571dbb536a44f861c5

    • SHA256

      1b1eb5652aafcb76fd53ca368d30fc255b5fc495236bfa6a1598caff5502a4aa

    • SHA512

      f751aede89bcd3988b7eb61cd8d4aed4c2709657faf0378e58dfd294c463f702e1b9fc331c8c31bc75f269dd454c49d466961af907385a0ed10b0855b1fed415

    • SSDEEP

      1536:EgjArN4W91+JlHJqE2PJAHPKyHb4h5Ft4pItFAUiYdtz/M5HzzvTKx9F4pXg+J8y:m7E2UKM4h5Ft4kNM5HDVpXIy

    Score
    3/10
    • Target

      windows/Dosia.exe

    • Size

      4.3MB

    • MD5

      21be396619d3ab2efa6a70387180e58f

    • SHA1

      09a3b689a5077bd89331acd157ebe621c8714a89

    • SHA256

      77cc16be9e6f910be9b154981df07ee9e426863e1543e0d84fbdfb7dc6c9d09f

    • SHA512

      c04fe8819847b51d2c23148025fa01a9ab3f3ca3f88bf908afa42dbcd58568e5c92500476925a096a627d9aafdd22ea0105a7f9260dd49017dbc82d214095b9f

    • SSDEEP

      98304:I68cgXwWux4ffGqIVkwAZgEkoA/M9wMVuA7r5jF/vKqdD5g+:ZYe2fGNhAJkb/YwM82rhJf

    Score
    9/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks