Resubmissions

14-12-2023 13:24

231214-qnk7psfch9 10

13-06-2023 12:56

230613-p6hc4agg5v 7

13-06-2023 12:17

230613-pf6b8sgb47 7

General

  • Target

    Bitcoin Generator.exe

  • Size

    19.4MB

  • Sample

    230613-pf6b8sgb47

  • MD5

    81c897adb15112b17abbe06d059cb94e

  • SHA1

    127adba7e72b869c2b973573393b4020436f16d3

  • SHA256

    e7d5fdbd30ab0feb353047b35bd4f34eaed0a30e2f6395cf1a7860aea5075838

  • SHA512

    56dae6c5ef139294be5ab5af8daf10252a01292b94678f282de6a3b65e0361d26bb126621ac930561648b5f0095ae7a4e4378c3e27c4ad4b076cff2d55bd62c6

  • SSDEEP

    393216:iuFys3QQK4bTlk3fs1JoFKOqRf8AuWzbCmdmjC:Y3Q9lk0EFSf1CO

Malware Config

Targets

    • Target

      Bitcoin Generator.exe

    • Size

      19.4MB

    • MD5

      81c897adb15112b17abbe06d059cb94e

    • SHA1

      127adba7e72b869c2b973573393b4020436f16d3

    • SHA256

      e7d5fdbd30ab0feb353047b35bd4f34eaed0a30e2f6395cf1a7860aea5075838

    • SHA512

      56dae6c5ef139294be5ab5af8daf10252a01292b94678f282de6a3b65e0361d26bb126621ac930561648b5f0095ae7a4e4378c3e27c4ad4b076cff2d55bd62c6

    • SSDEEP

      393216:iuFys3QQK4bTlk3fs1JoFKOqRf8AuWzbCmdmjC:Y3Q9lk0EFSf1CO

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks