Overview

overview

10

Static

static

10

out0.exe

windows7-x64

1

out0.exe

windows10-2004-x64

1

out1.exe

windows7-x64

1

out1.exe

windows10-2004-x64

1

out10.exe

windows7-x64

1

out10.exe

windows10-2004-x64

1

out11.exe

windows7-x64

1

out11.exe

windows10-2004-x64

1

out12.exe

windows7-x64

1

out12.exe

windows10-2004-x64

1

out13.exe

windows7-x64

1

out13.exe

windows10-2004-x64

1

out14.exe

windows7-x64

1

out14.exe

windows10-2004-x64

1

out15.exe

windows7-x64

1

out15.exe

windows10-2004-x64

1

out16.exe

windows7-x64

1

out16.exe

windows10-2004-x64

1

out17.exe

windows7-x64

1

out17.exe

windows10-2004-x64

1

out18.exe

windows7-x64

1

out18.exe

windows10-2004-x64

1

out19.exe

windows7-x64

out19.exe

windows10-2004-x64

out2.exe

windows7-x64

1

out2.exe

windows10-2004-x64

1

out20.exe

windows7-x64

1

out20.exe

windows10-2004-x64

1

out21.exe

windows7-x64

1

out21.exe

windows10-2004-x64

1

out22.exe

windows7-x64

1

out22.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FORTRIAGE.7z

  • Size

    528KB

  • Sample

    221108-bjgw6aaag3

  • MD5

    79b6402bf2a6a0d382f860e8d27ba232

  • SHA1

    73c4ee22668dbdd5518b6c8d4efd4906df950c2d

  • SHA256

    48ac37a414b973602d31d5db441c5095b5f7c977310cdad784efebac5bf9630d

  • SHA512

    9c40bfcb209b3d877c02bb856cecdc5a86922ebeae3dbbf57968525aa6fdfc8241fabada8d86b045d25b71916f1e1674738d3c318f5eea7338e7f83f33cb8c59

  • SSDEEP

    6144:4lR/R7vrgGgMkC04wzb3kCwCSfP+11XB2QuevGZ/xJTtGCgH2lBxEGQgHuCXXQs7:4v/RrZ/zCSfWfcQDedxJTtE2lmBI

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/exec

Targets

    • Target

      out0.exe

    • Size

      72KB

    • MD5

      b49e4f836dc42a6c3079a432e6611de7

    • SHA1

      240e5b866c136ea4105d902150c6442ecf4e6f29

    • SHA256

      b56983e0168c49413ae8af56ed9a96f3e0cc2f584a3f1c985aacf8f609057582

    • SHA512

      583e038037f98f131a74c7e204a5b8164ee15bea7b6b25531f065f4d6f9a01257b2c9ec5f474084854613166f3356e5bb723dd132a2e0156754cf7dcf60c0e23

    • SSDEEP

      1536:IyAajzGX7DB+gjac4nV/+BgE7JkOWgMb+KR0Nc8QsJq39:9AAzg7Jb4V/YgE7Lpe0Nc8QsC9

    Score
    1/10
    behavioral1behavioral2

    • Target

      out1.exe

    • Size

      72KB

    • MD5

      80fbcdd6e54d68767c1ae623d05763b9

    • SHA1

      e215f62b9f8d0ad37e7932f9b693c4c0c154dd84

    • SHA256

      9e6508ae048a5a60dd751e61616412ee648479e38c16dca6a36f5730870bef38

    • SHA512

      0bb27ac9085c5d13fb0d156003685fd6de41ee40337dfb7d7ae283940381b4d39c62ce3a4dd0ad2b19f999a88412f22dc294e8b7858d3678253fea97c46f0d3a

    • SSDEEP

      1536:IqA2fab3vjUit5A6bQgHMul3TQe3QLgqpQDMb+KR0Nc8QsJq39:ZXfu3oiPA6DTDQe3Yg3e0Nc8QsC9

    Score
    1/10
    behavioral3behavioral4

    • Target

      out10.exe

    • Size

      72KB

    • MD5

      bc6a46e9f5e8569e07b0e9db822d2853

    • SHA1

      ec05845cc65b30805f2ca4be8d68add3251407a2

    • SHA256

      7d9415b6a84c8e60e15491eb3a1d9a2831682ae07f993ab46c0aa70377098320

    • SHA512

      198741e0b69ca07e3a42688991bd1ba7ee334a4cb46c40817c0622483f672972320b6cd68372f03a70a94091ed3be762e24f119804a5fb432d7b81f0f2a04513

    • SSDEEP

      1536:ICJA4PqtPVQ692z2DVL+CDTuMb+KR0Nc8QsJq39:WhPVQ692zQL5ue0Nc8QsC9

    Score
    1/10
    behavioral5behavioral6

    • Target

      out11.exe

    • Size

      72KB

    • MD5

      a922e4039818351e464a06e79db997c5

    • SHA1

      e6c70ef25a39195c9fda844ab6edbb52ea52f5a9

    • SHA256

      2bca8171c2d97fcc5275108af744833c5d8899f7527267f45b4f38bcf3fb3348

    • SHA512

      5f0ce13b517e5fdd625daae1ecb4f9a8108062bd6feddb606052dea39bec1618d2ee388ab859428ef2d503a677f1b3c1fbb5be02fdd0607cdb4ed567cc97e0bf

    • SSDEEP

      1536:ID/OprztSxNvfSae3QL4Mb+KR0Nc8QsJq39:6/O7SzSF3I4e0Nc8QsC9

    Score
    1/10
    behavioral7behavioral8

    • Target

      out12.exe

    • Size

      72KB

    • MD5

      cec7fee9ab5614cca3417067bbd6b305

    • SHA1

      6df9111004d0a8f77056c4c9d20d2493315f03ba

    • SHA256

      f172c6ba8e0198f39d3acc07034e772c432fe63877435de7837ee56dc0bd7f9e

    • SHA512

      acfe23a7b2927117d5030d1239e72cadc8cf880b2cb9abe9d16eaaa80e2f4b978ca9cc62b937ecacb5bebd32b90672ef4b83b22e03448d2f3bae8d8c00bae725

    • SSDEEP

      1536:IBh/yJpH5+ImRf/Ml6sovqSPZXM1wO4BMb+KR0Nc8QsJq39:Mh/M/+I6f/MzCqSPySO4Be0Nc8QsC9

    Score
    1/10
    behavioral10behavioral9

    • Target

      out13.exe

    • Size

      72KB

    • MD5

      e6ef80bfbe6c0a765d2ab4385a72b538

    • SHA1

      fca8062a59ce403c7eb7ff237cf3b057b30d73cf

    • SHA256

      c71095163dd0f96cdd11d3cd351988961e783567c29c7a2a48ad03f08c82b19b

    • SHA512

      485984457b42c97c7482b66db05c0f7199a5a8a2adc4982864ca450e334e97ccd43100d0a4a0010f7e2dd1a63626316a9e1fe1301dc3c6f40264c15df79340ab

    • SSDEEP

      1536:IDpMKJPmVqwdxOdQERWJKTNUqeH/vlMb+KR0Nc8QsJq39:cpMGmMw7OMgNue0Nc8QsC9

    Score
    1/10
    behavioral11behavioral12

    • Target

      out14.exe

    • Size

      72KB

    • MD5

      10430ad28a2c5430556b9b18d34bcb5d

    • SHA1

      a35e0ffd9d29ea65b9014650ac7fe857e42af552

    • SHA256

      b0172ef49187e0988f2f0c50027e70dd0b6828f27b8f1a0f77ede415b854d8b3

    • SHA512

      8b70cc469d1f62c6dabbec7f3a8c11afe539ba9a8abb6f71df039888e15567b6f0afb2eeab18bfeb65b84804ac621d2af2ebdee2cc826d208af63dd184bf7703

    • SSDEEP

      1536:IvXZaSO1hdvGwG6lVTPJtmtnKMrnwPwwDMb+KR0Nc8QsJq39:kXoRdKULtmMMrDwDe0Nc8QsC9

    Score
    1/10
    behavioral13behavioral14

    • Target

      out15.exe

    • Size

      72KB

    • MD5

      971e7217c194ef2141557e2186559228

    • SHA1

      049acf6590a689979b1d04cdfe36fbcc24af287b

    • SHA256

      ea40bb474274c8ea7d030afd6b6d26f15993b20878857492d5eafe1c477c3650

    • SHA512

      1e69d9f5cb15f707498ec198ac853171cb1830dfc9036a0b2f46f381b8223dec64ff4b491ba4284692bed9b1a97b46e429f94ecd439467088f9eff26653664af

    • SSDEEP

      1536:IAdTXVGK+HF+dtpsVq7OpIg4t0BMb+KR0Nc8QsJq39:zOZ+eqKpIn0Be0Nc8QsC9

    Score
    1/10
    behavioral15behavioral16

    • Target

      out16.exe

    • Size

      72KB

    • MD5

      493e7a35a761f837e4ee2f984028ca3c

    • SHA1

      b0ce5076a7861cce6b338ee083585558f2b142b7

    • SHA256

      c2bc187d302d29e25dacd8034ca1dce97ea3b547c6a3d0087adfca31c618d519

    • SHA512

      97f234277ad455ad8b3e3f85b67f23347be326349725f84af0b26312c7d48405b81de6be93b1c336f75bf6dc4ea16388193e532aba081f3fb5bac40344b94947

    • SSDEEP

      1536:ISvUp/wvrZKMIqb2g9no6qofPWr6Mb+KR0Nc8QsJq39:HvKwtqqb2knJJU6e0Nc8QsC9

    Score
    1/10
    behavioral17behavioral18

    • Target

      out17.exe

    • Size

      72KB

    • MD5

      5a66cce8f462b39df0d3fda289b1d5b3

    • SHA1

      09efb03a9ca5fb3f8029d5996e09287bec02e0bb

    • SHA256

      305fee352917721c645b1c19c98d10df4c63b52053389453bbfa50fee1e4aad7

    • SHA512

      1b6746cc3227dcb2cf279adcfd8351783bf780aff395d51315f00fa12e14df7ef32e5f4b4eda993a68f38c608bac8688b1570c65d05784d2d5a81abc46c7b291

    • SSDEEP

      1536:IrwsQbtzAf5sGZC0As4siZmiyEQW0a/KZyPMb+KR0Nc8QsJq39:4tQb45sG54jCW0aTPe0Nc8QsC9

    Score
    1/10
    behavioral19behavioral20

    • Target

      out18.exe

    • Size

      72KB

    • MD5

      7c569fc6edbb4818190c2fc6ce2cf8b4

    • SHA1

      7aeb0a83f442a57646b43f451048da1135a6fa7a

    • SHA256

      0622de553b2afdc9f204554bddaf51213c0bdfe38dafd390f69c6d83e114b7c8

    • SHA512

      47055ee5971fd4ef2027b274d623c90762f62df5c45d429bfff53ef24a2966a3423b4aadb347b1a4d36fed9ec65da8b94fc47b65c847d65c6f1be1ac656a9ac3

    • SSDEEP

      1536:IZXZfVeEafMQA6+kxPtZmcd53Hju/YxMb+KR0Nc8QsJq39:4ZfsAQPb/Fe0Nc8QsC9

    Score
    1/10
    behavioral21behavioral22

    • Target

      out19.exe

    • Size

      69B

    • MD5

      69630e4574ec6798239b091cda43dca0

    • SHA1

      cf8bd9dfddff007f75adf4c2be48005cea317c62

    • SHA256

      131f95c51cc819465fa1797f6ccacf9d494aaaff46fa3eac73ae63ffbdfd8267

    • SHA512

      5581f85b25f0d80fa84c69e7ca24d98344f5fbaec45b7707dccf139a8c065961391d6e762516ee1db3137c4d82eca7fbc67c348c37ea0d615bb88161cf3b3008

    Score
    1/10
    behavioral23behavioral24

    • Target

      out2.exe

    • Size

      72KB

    • MD5

      02c8cc066c6f63732adea6e1e044d1c2

    • SHA1

      d71fdd39813aa667904bbed4a2e800b357dfa409

    • SHA256

      87e8a30af1bbc10330f972422b179e1b5520be7fbb5aa31c8f7570d8286f2b64

    • SHA512

      03bac3764c9575e0e9dd5d4403160a680f92465334c8222f042c43e9cc8fb347039f48f866eb8fdc393c31c09bd51b29fd1dab48e2dda85ccff7695a6e6c6e1c

    • SSDEEP

      1536:IprktX6wz2wP1NwXXxlx1yEmPkq0qZCrkRbMMb+KR0Nc8QsJq39:SktSPxl1mxuKMe0Nc8QsC9

    Score
    1/10
    behavioral25behavioral26

    • Target

      out20.exe

    • Size

      72KB

    • MD5

      ba955fe8ee0a883741243a318eb8d1bb

    • SHA1

      37adfd8f7b0dbb2a051be0a111a65cac2ad48368

    • SHA256

      7bfd619de6029ccf480c245ae861a74aeae7abae42fdc160ab8e8818ab4ab8e6

    • SHA512

      c488491c4d9c9af0612400c4c0ce19499cf3259094b3600e0dc16f26ccb2ffc07618efabbff432b4fbe194ceff274e5b1c4e414a64b9f3a60a7579c74747db64

    • SSDEEP

      1536:IlvpA2IaBCMLhWVKp548KarKPrKI0YKiMb+KR0Nc8QsJq39:sA70CMLkVKfFKjKpFie0Nc8QsC9

    Score
    1/10
    behavioral27behavioral28

    • Target

      out21.exe

    • Size

      72KB

    • MD5

      9ef7fa437ae2c97ed78a4e688446ac3a

    • SHA1

      7f6b0b04531927c58dfe0deed9090e1dee62b774

    • SHA256

      c6d3166aa8bf663e3d3898cf3f59cfca5e7cf130fa881b010453327ee7f56679

    • SHA512

      b60f62babaf13477a44794610f4a666576e04fc2e284815333b416021cd69a0917501ff15eb0ca834254f1e5402bc2e766489b8513aa21f157bb7a3cbe73cc80

    • SSDEEP

      1536:Ipo4Djv3dUuLvlgSk2UEbVGf7HRR9szesGQQpHMb+KR0Nc8QsJq39:sXvZ6SksUf7xSeFpHe0Nc8QsC9

    Score
    1/10
    behavioral29behavioral30

    • Target

      out22.exe

    • Size

      72KB

    • MD5

      41f077e29653c80140d9173027d86ab8

    • SHA1

      1f1d58c6e9026cc385a013de5d86ae06d241586e

    • SHA256

      300029d33e768e64437d7758db0148c161b41fe6c630bfa9bc531141dd8f6a10

    • SHA512

      bc6d217734a6d3a2968ca8de9b30f7a0aca3ae5840a7d49eee1384f075c11466cc33bb2bcd61a8a781b08e85578c3318cdb4365d904e783f5b9a7b3197a1d6d0

    • SSDEEP

      1536:IOGk1isXHjonR+Um4NivsAKBFiMb+KR0Nc8QsJq39:x1hFb4sGBke0Nc8QsC9

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Matrix

Tasks