General

  • Target

    SecuriteInfo.com.Win32.DropperX-gen.28420.31272.exe

  • Size

    12.1MB

  • Sample

    230630-yhlv2sfe8v

  • MD5

    0ef4e3af8936e03be74afa2395286301

  • SHA1

    273dd0dde838b7878b2870c8a4e2f1fb0d91e6fd

  • SHA256

    5bf3863bd0b4af59a4cdf9b9080b60c827cc19e368beae60ea3930adf12ddec0

  • SHA512

    6938a111a124bc82d8d0576dc7769170974575ba2c545c53424a7285e6da242dc39f722920adfba88c472ba88313b6e0d682183a6fdb15df1ba98f5cf723c79a

  • SSDEEP

    393216:nzbN0o5te8ZBAVVrXcC73WQGb7wWHeigBlRaJFLQM:nzhFlBAVVrXcCybM3gLQ

Score
10/10

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.DropperX-gen.28420.31272.exe

    • Size

      12.1MB

    • MD5

      0ef4e3af8936e03be74afa2395286301

    • SHA1

      273dd0dde838b7878b2870c8a4e2f1fb0d91e6fd

    • SHA256

      5bf3863bd0b4af59a4cdf9b9080b60c827cc19e368beae60ea3930adf12ddec0

    • SHA512

      6938a111a124bc82d8d0576dc7769170974575ba2c545c53424a7285e6da242dc39f722920adfba88c472ba88313b6e0d682183a6fdb15df1ba98f5cf723c79a

    • SSDEEP

      393216:nzbN0o5te8ZBAVVrXcC73WQGb7wWHeigBlRaJFLQM:nzhFlBAVVrXcCybM3gLQ

    Score
    10/10
    • DarkVNC

      DarkVNC is a malicious version of the famous VNC software.

    • DarkVNC payload

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks