Overview

overview

8

Static

static

8

ROBOLE~2.exe

windows7-x64

1

ROBOLE~2.exe

windows10-2004-x64

1

Thunder.exe

windows7-x64

8

Thunder.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    caa4826420a5b8b1568a414be006d5cce7d233d02d3f3a5cf38dc71aa8dd107a

  • Size

    1.6MB

  • Sample

    221203-e2k83shc3t

  • MD5

    3a81c09ec94415ec90e74da4975db6e8

  • SHA1

    d52855b9b7b59d5ad262b08a7ce1290664c41d11

  • SHA256

    caa4826420a5b8b1568a414be006d5cce7d233d02d3f3a5cf38dc71aa8dd107a

  • SHA512

    7e72223f3403dc87e8a298c462280812008c038ce5d67029704ed203b8b9c89f2a96644601ab1ed1a648b362a1c8db3319553e96d0bd0a3e54fdc6c6e9d24969

  • SSDEEP

    49152:GUvDoFQjC8cBAs+FvaFuV5ToqsCkrEXlRL6J9z:kKjC7Ws+FWuXPiEn+z

Score
8/10
upx

Malware Config

Targets

    • Target

      ROBOLE~2.EXE

    • Size

      1.6MB

    • MD5

      b48adc12cd446c642427909deec44e88

    • SHA1

      ef445b2383d77f6778644c11f50c2c19fe3a78c7

    • SHA256

      2b67a8b97f02ca0bee057c3c6b338650fef952be404e7dcfd8fda3b516e137f8

    • SHA512

      4bcb09fd47f5d0a3d8eecc5eded34d615e81552a3343b5eced28256df8756c9335653c59a6f8d67790dbe0128ee44cf043be5b7063cac12ec9ac1c06c9091b7d

    • SSDEEP

      49152:VrhvvCFQOhZ/9lHMV1qhiMET+0yXikC+RYvr1X:eKOhp9lHMVMiFGXZk

    Score
    1/10
    behavioral1behavioral2

    • Target

      Thunder.exe

    • Size

      13KB

    • MD5

      9e308c45146d3ea9daca4e559cc5ace6

    • SHA1

      fdf0da64f485533b18a7a4bdcbc2a3b34433d16f

    • SHA256

      7236d5f2583b592b07f2475df31638913277cb08b9a7ca799476f93c81cd4f01

    • SHA512

      733c9b0c58cb24a6513a782cb3df0ecdb5f7e040847df1db425ada0244237dce78b7a058f16c87acaa6ff2589d5d17f8f8b0472363f361141b09996f072bbbdf

    • SSDEEP

      192:8+T0PO0A4zMq/Upbqr3n8Ha/fEIa/R8fzWqWqWuObEbCd+KdG9nnS:8JPbMz0jauLLt7AdGg

    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks