Overview

overview

4

Static

static

3

.ses

windows7-x64

3

.ses

windows10-2004-x64

3

lu/nada_16...32.exe

windows7-x64

4

lu/nada_16...32.exe

windows10-2004-x64

4

lu/nada_16...xe.sig

windows7-x64

3

lu/nada_16...xe.sig

windows10-2004-x64

3

lu/nada_16...g.part

windows7-x64

3

lu/nada_16...g.part

windows10-2004-x64

3

~nsu.tmp/Au_.exe

windows7-x64

3

~nsu.tmp/Au_.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Low.zip

  • Size

    327KB

  • Sample

    230526-l73hwafd9z

  • MD5

    efa948e0880fd77ee0ec154dd3c8318f

  • SHA1

    c7ff85cdae281dd89d7dd44dc46890e59512133d

  • SHA256

    66bc228367a36316372275525720f283ba3aff3c379badd71a71efc527f40e7b

  • SHA512

    1fa1a1f446cdeddce93f275b2c61d245fd1199ca16dd6e7d8ca3f61bdc3ab7f63661dc495b935c29ebd3b23b1335cb07c32b4ea0b1b2e852bc66695289860a5d

  • SSDEEP

    6144:d4Ut4DkrmRdEeOZCB8vNmnTlM4r2EXENqanAcHEAxDRog2p89OEez:WUmDQV7Z6KiBMbZhECmgfOEez

Score
4/10

Malware Config

Targets

    • Target

      .ses

    • Size

      53B

    • MD5

      880b5202e53948da5e74039d693d656f

    • SHA1

      57b9fb0fbeaf810340e243a5d928075048212fd4

    • SHA256

      f3870b5d6fb17a7d293965669239e452106fe4f94fb17524126a6936dd487e69

    • SHA512

      28e22b2125bd36075bf5fefca330d2a3fceb0e1681a546be5ba72c6892a8a5e43df7ba23c54b1a859a82296c79a8dd2f3e30e0e87174ff057ae22b31bf9d3c65

    Score
    3/10
    behavioral1behavioral2

    • Target

      lu/nada_164_046d-uipak_x32.exe

    • Size

      312KB

    • MD5

      391d2487595ef8e8368b9271abc76799

    • SHA1

      bfa7d96b893ca7fea349ba8d01a4f6ac17fbd968

    • SHA256

      85156b6391d646dfd0a9e8fbfba5bf234e1f629c78f0844034330a862fd77c1c

    • SHA512

      ebc133e44f16bcb40046ded9539c0adb168c37a0e9f4865735bfd38a3a02d853fd6e5a38b59cd45fc48ae31e5cb879142f981d67a07b84591aa74e4cc81bbe2e

    • SSDEEP

      6144:tzZZxgKlrEf08BCxkA6IGfA9TlM432wa7AfNgm2/xqHTi0zY108OiI:tzZz3wf0YWkIGoBMJ5QN3neVO/

    Score
    4/10
    behavioral3behavioral4

    • Target

      lu/nada_164_046d-uipak_x32.exe.sig

    • Size

      128B

    • MD5

      5a66b387b64dcbcf0efb112e45efdbc2

    • SHA1

      41b71680a94aaed96543788946375f60ca2cb2c7

    • SHA256

      9c11ca931db98e5e229916dcdc569f23d53fed825404503a04d5db6d6732e83d

    • SHA512

      f6e57f176efc930f44dc07ad4c66622e52371133e4e3ef3dd067aa0e0099989b61d4610a0b8a836f06f63943e9751bf131b358b3cfe2b20486b4c339bc7dedbf

    Score
    3/10
    behavioral5behavioral6

    • Target

      lu/nada_164_046d-uipak_x32.exe.sig.part

    • Size

      128B

    • MD5

      5a66b387b64dcbcf0efb112e45efdbc2

    • SHA1

      41b71680a94aaed96543788946375f60ca2cb2c7

    • SHA256

      9c11ca931db98e5e229916dcdc569f23d53fed825404503a04d5db6d6732e83d

    • SHA512

      f6e57f176efc930f44dc07ad4c66622e52371133e4e3ef3dd067aa0e0099989b61d4610a0b8a836f06f63943e9751bf131b358b3cfe2b20486b4c339bc7dedbf

    Score
    3/10
    behavioral7behavioral8

    • Target

      ~nsu.tmp/Au_.exe

    • Size

      84KB

    • MD5

      0fc305680bfaa219832a762006671def

    • SHA1

      1b83c060e7f2de074d9258e1f12d5b4c40dbac05

    • SHA256

      046b1273b28df7611d50a560d935868989eae66635e64a89677a4d6990ae2f3d

    • SHA512

      9e75a894ffbcd6e21553d481159b233bc06b57d745fe8e5345218ab0fe3d1d447ba03fb56340c3b8eb4053679b6f8eb04500b8aa6a46b3657e18244919fb84ea

    • SSDEEP

      1536:VdZEszWriITJGrvopX1VF7CXjl7yE/YRN6QcIgASy6ECFkIGkA:GszWOITsEL50jl7ywqhCFvA

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v6

Tasks