Resubmissions

06/08/2023, 03:58

230806-ejrm5shb6y 7

06/08/2023, 03:53

230806-ef3w1ahb5y 7

General

  • Target

    MarlowV2Edit.exe

  • Size

    13.6MB

  • Sample

    230806-ejrm5shb6y

  • MD5

    6c630b8cfe0ec5f1b42bfb9f40cfcba7

  • SHA1

    605ec8cb3b3672a4354931071f0bf5037bd1d7c3

  • SHA256

    b8b5dcc34b6e1627a9e0c8245e5ee0f5ad6778c07ed980b4a0c9296edee8404b

  • SHA512

    9bee51f07dcbd7b1c42f152802aeecad18051a1f315623e6a4dcb83b663ea46b53145dc317c731419287ec3f1381a920e88970ecdfc6cdeb467cca2f52a61b8a

  • SSDEEP

    196608:hd1J+46eW+Va65nitGbv4FMIZETSWjPePdrQJuKbjcBeOqM8G9Au5bGYPSiltw:dJ+FevOGzQETSWvJDjXOqM8pYKabw

Score
7/10

Malware Config

Targets

    • Target

      MarlowV2Edit.exe

    • Size

      13.6MB

    • MD5

      6c630b8cfe0ec5f1b42bfb9f40cfcba7

    • SHA1

      605ec8cb3b3672a4354931071f0bf5037bd1d7c3

    • SHA256

      b8b5dcc34b6e1627a9e0c8245e5ee0f5ad6778c07ed980b4a0c9296edee8404b

    • SHA512

      9bee51f07dcbd7b1c42f152802aeecad18051a1f315623e6a4dcb83b663ea46b53145dc317c731419287ec3f1381a920e88970ecdfc6cdeb467cca2f52a61b8a

    • SSDEEP

      196608:hd1J+46eW+Va65nitGbv4FMIZETSWjPePdrQJuKbjcBeOqM8G9Au5bGYPSiltw:dJ+FevOGzQETSWvJDjXOqM8pYKabw

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      hazard.pyc

    • Size

      49KB

    • MD5

      25225e62ef582d2616d4259af65b14e1

    • SHA1

      87e98258cd3bc3c682d651165c7d59ddfacee16e

    • SHA256

      47d52b242a4ca496f1493a3fb3fd1c3d93f4eb8a1b4b46e0d8670a8266220ec7

    • SHA512

      9afc1e434206dc2de84181da097a9dba0f3a57f47830788a09433b963a0500dac295ecd228584f658650cee5565f5b6c7b403ce7161c323e9562c7d243bbeff6

    • SSDEEP

      1536:VVIR8GrkRIbLeDnJuy4+c6VwugzgR6gbw:VVIfkWXuu+c6VwugzgIr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks