General

  • Target

    8afc8991eda2ee1462308bbd940fe38d0620fe8c06ce2e0404593c21e56db297

  • Size

    2.7MB

  • Sample

    221028-pr9tssgaem

  • MD5

    2e30197d4e2aa0bca68c8da123a0fc78

  • SHA1

    c66878518691a0721c95300b62f27c7a27754319

  • SHA256

    8afc8991eda2ee1462308bbd940fe38d0620fe8c06ce2e0404593c21e56db297

  • SHA512

    975fb1826a833e91def9ec2675516eddd6bda29ed163ba58dfa4f7a72b5294b522abdcc8e202993b765b3d04e2977e60ff9a5a78662933e865f1b3bd65594182

  • SSDEEP

    49152:cGTEMisXVCgvAZ6X/b5Bvd11LkrgCuygbwEF2m8YiW:cGIMis04Agz5/L8jkqW

Score
10/10

Malware Config

Targets

    • Target

      8afc8991eda2ee1462308bbd940fe38d0620fe8c06ce2e0404593c21e56db297

    • Size

      2.7MB

    • MD5

      2e30197d4e2aa0bca68c8da123a0fc78

    • SHA1

      c66878518691a0721c95300b62f27c7a27754319

    • SHA256

      8afc8991eda2ee1462308bbd940fe38d0620fe8c06ce2e0404593c21e56db297

    • SHA512

      975fb1826a833e91def9ec2675516eddd6bda29ed163ba58dfa4f7a72b5294b522abdcc8e202993b765b3d04e2977e60ff9a5a78662933e865f1b3bd65594182

    • SSDEEP

      49152:cGTEMisXVCgvAZ6X/b5Bvd11LkrgCuygbwEF2m8YiW:cGIMis04Agz5/L8jkqW

    Score
    10/10
    • Detected adobe phishing page

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      out.upx

    • Size

      8.7MB

    • MD5

      53bdac7081b43d93982aa88ec4c6782b

    • SHA1

      442ee517d4eba0d1aef89b5072f46401b3ea51fd

    • SHA256

      41bc0c93ae5549a4bead96b557c72aa0304cda079644edec2139ef4b7d5d56f1

    • SHA512

      e18364c0e719a7719412c4816c563cabc7705e87f4f6d47ecddf49d05b83f9c24e015c9adc68b92c417b8b0b85a96c330266b9dde4ab8d9eb395b7bf28889a35

    • SSDEEP

      98304:WUFc5FbNJCoAnfR94zrBFlHmzuP7kGWZXAum5cF1lFhPZbkCS:WEc5FbNoooR94zrzlGzuPsmerhPa

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Tasks