Resubmissions

27-08-2023 13:37

230827-qw645shf83 10

27-08-2023 13:33

230827-qtj7lahf64 6

General

  • Target

    pexels_videos_2028761 (1080p).mp4

  • Size

    18.6MB

  • Sample

    230827-qw645shf83

  • MD5

    49fc43ffad271e2e4a1ba4585f8ab2d3

  • SHA1

    188b1c31d57c233ea92394b7086a3a7c53668bdd

  • SHA256

    109c70d63b69cd442a1fff4d9249de803bb4611791f7fdd7ea65b7da8ddb74b1

  • SHA512

    9fc6c1bb4facd3eea293445d3874234df05a0d63b57169a8cb1f4f9afc8b864adefa2a9bce3eac374edc9ba03c759f3438f09f0c42ec79a2403a8cf20b17a1d8

  • SSDEEP

    393216:3cHehtL3segrST4NGfs773Dc6CnzTCPXwL2v:3cY3casQJyPXwL2v

Score
10/10

Malware Config

Targets

    • Target

      pexels_videos_2028761 (1080p).mp4

    • Size

      18.6MB

    • MD5

      49fc43ffad271e2e4a1ba4585f8ab2d3

    • SHA1

      188b1c31d57c233ea92394b7086a3a7c53668bdd

    • SHA256

      109c70d63b69cd442a1fff4d9249de803bb4611791f7fdd7ea65b7da8ddb74b1

    • SHA512

      9fc6c1bb4facd3eea293445d3874234df05a0d63b57169a8cb1f4f9afc8b864adefa2a9bce3eac374edc9ba03c759f3438f09f0c42ec79a2403a8cf20b17a1d8

    • SSDEEP

      393216:3cHehtL3segrST4NGfs773Dc6CnzTCPXwL2v:3cY3casQJyPXwL2v

    Score
    10/10
    • SnakeBOT

      SnakeBOT is a heavily obfuscated .NET downloader.

    • Contains SnakeBOT related strings

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks