General

  • Target

    34ed63ba8b002f5f5dc3c5998285d3347711304b1c49b760ec42ad43686d6785

  • Size

    17.4MB

  • Sample

    221125-n589rafb49

  • MD5

    b747ab09d247b2754923d5cae9043da0

  • SHA1

    d8a7f71c0433064d869d87f877fb8584593135b6

  • SHA256

    34ed63ba8b002f5f5dc3c5998285d3347711304b1c49b760ec42ad43686d6785

  • SHA512

    7207d5763cdf4f63c8def99b2a3ad3cccbc616a2476773fbe7e16f202fa7aa89badece14265b677a5198a87cb9e81d8556ba0743abf69c1db293efe5b9bf5104

  • SSDEEP

    196608:2mtPYLdtwjJCJ35zrrQfJsTaaD+BQit5nbVEd:VALT5zDKt1G

Score
8/10

Malware Config

Targets

    • Target

      34ed63ba8b002f5f5dc3c5998285d3347711304b1c49b760ec42ad43686d6785

    • Size

      17.4MB

    • MD5

      b747ab09d247b2754923d5cae9043da0

    • SHA1

      d8a7f71c0433064d869d87f877fb8584593135b6

    • SHA256

      34ed63ba8b002f5f5dc3c5998285d3347711304b1c49b760ec42ad43686d6785

    • SHA512

      7207d5763cdf4f63c8def99b2a3ad3cccbc616a2476773fbe7e16f202fa7aa89badece14265b677a5198a87cb9e81d8556ba0743abf69c1db293efe5b9bf5104

    • SSDEEP

      196608:2mtPYLdtwjJCJ35zrrQfJsTaaD+BQit5nbVEd:VALT5zDKt1G

    Score
    8/10
    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks