Overview

overview

8

Static

static

1

ESET Endpo...ll.rar

windows7-x64

6

ESET Endpo....0.exe

windows7-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ESET Endpoint (Antivirus +Security) 10.0.2045.0 Full.rar

  • Size

    50.7MB

  • Sample

    230403-vj3y6sga52

  • MD5

    14ef58c7607f3ef745257dbf3318b3a3

  • SHA1

    a63cfebddaa0c0dc3c1acd736f880ff9a0ec8cd2

  • SHA256

    4964124810106eead675548f79f55cadc2084770e43f00da8e499c97c1774265

  • SHA512

    7603c808d69b39ff478c1cc9dda38a4dc454dac456ffda0a6933395a4083b1fa5ac4d9f1b5ebfad638ac3105846fac05ec3aeeca531f8dabf538e177bc5a0d40

  • SSDEEP

    1572864:GfsPgsIv6fZB9SvBYv0wV2jP0Q0yVrBDtAK:G9CBB9+Yv0w0r0QDrBBH

Score
8/10

Malware Config

Targets

    • Target

      ESET Endpoint (Antivirus +Security) 10.0.2045.0 Full.rar

    • Size

      50.7MB

    • MD5

      14ef58c7607f3ef745257dbf3318b3a3

    • SHA1

      a63cfebddaa0c0dc3c1acd736f880ff9a0ec8cd2

    • SHA256

      4964124810106eead675548f79f55cadc2084770e43f00da8e499c97c1774265

    • SHA512

      7603c808d69b39ff478c1cc9dda38a4dc454dac456ffda0a6933395a4083b1fa5ac4d9f1b5ebfad638ac3105846fac05ec3aeeca531f8dabf538e177bc5a0d40

    • SSDEEP

      1572864:GfsPgsIv6fZB9SvBYv0wV2jP0Q0yVrBDtAK:G9CBB9+Yv0w0r0QDrBBH

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

    • Target

      ESET Endpoint (Antivirus +Security) 10.0.2045.0 Full/EEA.EES.v10.0.2045.0.exe

    • Size

      50.8MB

    • MD5

      e59177f654d68fc1807dc19298bb6789

    • SHA1

      bacba0b93019b24fc1a0fb224030c4f27ecfec0e

    • SHA256

      0fdb7293aabab61fdbe82928e3cb6a6ce97dfd16744b994b85391f8fae44d886

    • SHA512

      96618df935d3be40ef2de29f3106ebb6bdc5ebb3c814b39b1e2c2911623ae00af467f015650c0e5fe408a3ab1101efa144b77fc187c1d1fd101b4a1e61eba3c4

    • SSDEEP

      1572864:W89GBPfSLzP5rJ5wFjFqAgGobmCqTe88G/Z6:GinhJCwAgGJQGh6

    Score
    8/10

    • Drops file in Drivers directory

    • Loads dropped DLL

    behavioral2

MITRE ATT&CK Enterprise v6

Tasks