Resubmissions

20/04/2023, 11:53

230420-n2qy1ahf72 8

20/04/2023, 11:50

230420-nz2bysbf6x 3

General

  • Target

    2fa8d7c1-06de-4454-87b6-05a2ca44f69332612743.jpg

  • Size

    164KB

  • Sample

    230420-n2qy1ahf72

  • MD5

    de4eab6aeade8f381c2cd68ffb1d1e78

  • SHA1

    090718b573927935d4c76ea6caaf7c6e2071d271

  • SHA256

    bb1c55d10810ef9ebd4c806d67058260e4b1a4bbe6468c7abfb815602b8f00bf

  • SHA512

    5503532537dfd21ba53e689045ed260c4eb3c884d8d4340b9ef76337ae736a393598f15c4a625d7c08c81a3394710dac64e4806bfedf0fda76b29177133c960c

  • SSDEEP

    3072:gdhb2qxDvAL7JnxjWvbkC5ZbHEho/YOvmnI6zXhxUTugWxRTEMEKF8a6BC:gdh6q9Anvf6Z8w+nI6kugWxRTLFX68

Score
8/10

Malware Config

Targets

    • Target

      2fa8d7c1-06de-4454-87b6-05a2ca44f69332612743.jpg

    • Size

      164KB

    • MD5

      de4eab6aeade8f381c2cd68ffb1d1e78

    • SHA1

      090718b573927935d4c76ea6caaf7c6e2071d271

    • SHA256

      bb1c55d10810ef9ebd4c806d67058260e4b1a4bbe6468c7abfb815602b8f00bf

    • SHA512

      5503532537dfd21ba53e689045ed260c4eb3c884d8d4340b9ef76337ae736a393598f15c4a625d7c08c81a3394710dac64e4806bfedf0fda76b29177133c960c

    • SSDEEP

      3072:gdhb2qxDvAL7JnxjWvbkC5ZbHEho/YOvmnI6zXhxUTugWxRTEMEKF8a6BC:gdh6q9Anvf6Z8w+nI6kugWxRTLFX68

    Score
    8/10
    • Contacts a large (519) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Downloads MZ/PE file

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks