General
-
Target
MarlowV2Edit.exe
-
Size
13.6MB
-
Sample
230806-ejrm5shb6y
-
MD5
6c630b8cfe0ec5f1b42bfb9f40cfcba7
-
SHA1
605ec8cb3b3672a4354931071f0bf5037bd1d7c3
-
SHA256
b8b5dcc34b6e1627a9e0c8245e5ee0f5ad6778c07ed980b4a0c9296edee8404b
-
SHA512
9bee51f07dcbd7b1c42f152802aeecad18051a1f315623e6a4dcb83b663ea46b53145dc317c731419287ec3f1381a920e88970ecdfc6cdeb467cca2f52a61b8a
-
SSDEEP
196608:hd1J+46eW+Va65nitGbv4FMIZETSWjPePdrQJuKbjcBeOqM8G9Au5bGYPSiltw:dJ+FevOGzQETSWvJDjXOqM8pYKabw
Behavioral task
behavioral1
Sample
MarlowV2Edit.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral2
Sample
hazard.pyc
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
MarlowV2Edit.exe
-
Size
13.6MB
-
MD5
6c630b8cfe0ec5f1b42bfb9f40cfcba7
-
SHA1
605ec8cb3b3672a4354931071f0bf5037bd1d7c3
-
SHA256
b8b5dcc34b6e1627a9e0c8245e5ee0f5ad6778c07ed980b4a0c9296edee8404b
-
SHA512
9bee51f07dcbd7b1c42f152802aeecad18051a1f315623e6a4dcb83b663ea46b53145dc317c731419287ec3f1381a920e88970ecdfc6cdeb467cca2f52a61b8a
-
SSDEEP
196608:hd1J+46eW+Va65nitGbv4FMIZETSWjPePdrQJuKbjcBeOqM8G9Au5bGYPSiltw:dJ+FevOGzQETSWvJDjXOqM8pYKabw
Score7/10-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
hazard.pyc
-
Size
49KB
-
MD5
25225e62ef582d2616d4259af65b14e1
-
SHA1
87e98258cd3bc3c682d651165c7d59ddfacee16e
-
SHA256
47d52b242a4ca496f1493a3fb3fd1c3d93f4eb8a1b4b46e0d8670a8266220ec7
-
SHA512
9afc1e434206dc2de84181da097a9dba0f3a57f47830788a09433b963a0500dac295ecd228584f658650cee5565f5b6c7b403ce7161c323e9562c7d243bbeff6
-
SSDEEP
1536:VVIR8GrkRIbLeDnJuy4+c6VwugzgR6gbw:VVIfkWXuu+c6VwugzgIr
Score3/10 -