General

  • Target

    file.exe

  • Size

    5.0MB

  • Sample

    230209-m2tt8ahb91

  • MD5

    6751ece6521d2c20be23a4855c958823

  • SHA1

    25d0de6b309e54dece4e7d7f8b1cfdc54b780eca

  • SHA256

    0cd8694a6d353aaf9b35ae711c0c9c49cbbd0f7f11c86a3c77168ca46d13538f

  • SHA512

    4150b4107cda5c9bd4ba37b693c7b8e86e3c461b9b7add6b6436bb9f200877e901f0a6ebb85f73d734d1ae6da3a8e6e2944e96034b774bd5eff35c57ccbde19d

  • SSDEEP

    98304:4ezYo0HRBYigZsa0BjkcC+BQSw6qvayvCgnWG1GlbY24B:4ez62tqhAWQSwzv9nr8hcB

Malware Config

Targets

    • Target

      file.exe

    • Size

      5.0MB

    • MD5

      6751ece6521d2c20be23a4855c958823

    • SHA1

      25d0de6b309e54dece4e7d7f8b1cfdc54b780eca

    • SHA256

      0cd8694a6d353aaf9b35ae711c0c9c49cbbd0f7f11c86a3c77168ca46d13538f

    • SHA512

      4150b4107cda5c9bd4ba37b693c7b8e86e3c461b9b7add6b6436bb9f200877e901f0a6ebb85f73d734d1ae6da3a8e6e2944e96034b774bd5eff35c57ccbde19d

    • SSDEEP

      98304:4ezYo0HRBYigZsa0BjkcC+BQSw6qvayvCgnWG1GlbY24B:4ez62tqhAWQSwzv9nr8hcB

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Tasks