General

  • Target

    aa5628e9f58359exeexeexeex.exe

  • Size

    4.1MB

  • Sample

    230709-lgfanaca49

  • MD5

    aa5628e9f58359ec9b98b1fb498d04bd

  • SHA1

    0d5e6d36c226c6f2e3e2f32f46e748d8f0454bfb

  • SHA256

    f567c9479025df10b0f207e829bccf74af1372b36062272ca63253cac43d0759

  • SHA512

    1f22c9184404f93525b6241a99e7d5a346069a1bc95cb06f299a727301af99fa4eeff1600d77e66be8877cab826bf6b6fbe8ca59fa434403343d92252feb1c6f

  • SSDEEP

    98304:rbOSQfWhNbXNzDrvDajA1iALwb3PWZ+b8T4:rbOSQ+7bXNzDnajXqYN

Score
7/10

Malware Config

Targets

    • Target

      aa5628e9f58359exeexeexeex.exe

    • Size

      4.1MB

    • MD5

      aa5628e9f58359ec9b98b1fb498d04bd

    • SHA1

      0d5e6d36c226c6f2e3e2f32f46e748d8f0454bfb

    • SHA256

      f567c9479025df10b0f207e829bccf74af1372b36062272ca63253cac43d0759

    • SHA512

      1f22c9184404f93525b6241a99e7d5a346069a1bc95cb06f299a727301af99fa4eeff1600d77e66be8877cab826bf6b6fbe8ca59fa434403343d92252feb1c6f

    • SSDEEP

      98304:rbOSQfWhNbXNzDrvDajA1iALwb3PWZ+b8T4:rbOSQ+7bXNzDnajXqYN

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks