Overview

overview

8

Static

static

3

remover.exe

windows7-x64

8

remover.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    remover.exe

  • Size

    9.8MB

  • Sample

    230805-ecq32agg9x

  • MD5

    c0f73739b27e74631d559d53ce352d84

  • SHA1

    dcc94df4448ac0198b41f4f515d92ddde62a48de

  • SHA256

    a3bfc0780ade271d462ce6f612edc283b84e781d7ae6dbca2018fb61ac5ae83c

  • SHA512

    5245756e23db3c055a83676297825ea529ae126979612b5b1d882f19a2f4b4dd636ef521d95427a49b6599bd1887e946a06eccec0d29eb5bd71457581e853831

  • SSDEEP

    196608:Lux7QC8ICteEroXxWVfEqlbkkwR7VTE548RmU/3ZlsPvu4DoDTvN8CXLNGO/639X:Qx8InEroXgfEqirRRo5tN3ZWu4DSTtLr

Score
8/10
pyinstaller

Malware Config

Targets

    • Target

      remover.exe

    • Size

      9.8MB

    • MD5

      c0f73739b27e74631d559d53ce352d84

    • SHA1

      dcc94df4448ac0198b41f4f515d92ddde62a48de

    • SHA256

      a3bfc0780ade271d462ce6f612edc283b84e781d7ae6dbca2018fb61ac5ae83c

    • SHA512

      5245756e23db3c055a83676297825ea529ae126979612b5b1d882f19a2f4b4dd636ef521d95427a49b6599bd1887e946a06eccec0d29eb5bd71457581e853831

    • SSDEEP

      196608:Lux7QC8ICteEroXxWVfEqlbkkwR7VTE548RmU/3ZlsPvu4DoDTvN8CXLNGO/639X:Qx8InEroXgfEqirRRo5tN3ZWu4DSTtLr

    Score
    8/10

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks