General

  • Target

    WPBE1877.exe

  • Size

    498KB

  • Sample

    230719-q1c2vsgd74

  • MD5

    fe9db7933ebf3259b7e03cd0cee913cf

  • SHA1

    071e14a82d9e5ee7f53d01ef86ddb5739fb03471

  • SHA256

    bde6705bc56984fab54311198daaa4d44741a4e6805010d9830bf0fdf02c84ec

  • SHA512

    4f10ae2d636ce4392ebb3b8ef52bd8cd9e1d32a6f9f5eead59bec1b9913137ea6b1a7a09b4fe0555abb6f5676d02f0805ac524da8c88a21544913a822d824341

  • SSDEEP

    6144:gKoUOOEsBtk3FmS+51IbWrFmS+51I9WarGOrT89xp20CoFli60m:+UO+7iFmS+5ibWrFmS+5i9WaaOex86L

Score
7/10

Malware Config

Targets

    • Target

      WPBE1877.exe

    • Size

      498KB

    • MD5

      fe9db7933ebf3259b7e03cd0cee913cf

    • SHA1

      071e14a82d9e5ee7f53d01ef86ddb5739fb03471

    • SHA256

      bde6705bc56984fab54311198daaa4d44741a4e6805010d9830bf0fdf02c84ec

    • SHA512

      4f10ae2d636ce4392ebb3b8ef52bd8cd9e1d32a6f9f5eead59bec1b9913137ea6b1a7a09b4fe0555abb6f5676d02f0805ac524da8c88a21544913a822d824341

    • SSDEEP

      6144:gKoUOOEsBtk3FmS+51IbWrFmS+51I9WarGOrT89xp20CoFli60m:+UO+7iFmS+5ibWrFmS+5i9WaaOex86L

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v6

Tasks