Overview

overview

10

Static

static

1

wagnergroup.rtf

windows7-x64

10

wagnergroup.rtf

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    wagnergroup.rtf_

  • Size

    768KB

  • Sample

    230828-rsxlzaef6z

  • MD5

    2735cd8e39f7e6ce667ab2722770931c

  • SHA1

    ae28b5c3b41691278f54b172f78c9743538cd2dc

  • SHA256

    01661afa5717fe897d158307176df84874e21adf696e3365685204538bd0a4e5

  • SHA512

    36b160586c8aeb6f988cb189f624b67972554b2aef6c18e7641504d5cd7a3d16ca376cecbdb34fd8048f9a5fc95b5207a2c7fb7c144b86e62ea1e3ed0d510f8f

  • SSDEEP

    768:5stVBjHeY2xUSc2xoEYGZc+dySGri6CbEYKhqgbEYhhigbEYhh8gbEYuIQY7EH4z:5spHoC

Score
10/10

Malware Config

Extracted

Language
hta
Source
URLs
hta.dropper

https://iplogger.com/fancybear.gif

Targets

    • Target

      wagnergroup.rtf_

    • Size

      768KB

    • MD5

      2735cd8e39f7e6ce667ab2722770931c

    • SHA1

      ae28b5c3b41691278f54b172f78c9743538cd2dc

    • SHA256

      01661afa5717fe897d158307176df84874e21adf696e3365685204538bd0a4e5

    • SHA512

      36b160586c8aeb6f988cb189f624b67972554b2aef6c18e7641504d5cd7a3d16ca376cecbdb34fd8048f9a5fc95b5207a2c7fb7c144b86e62ea1e3ed0d510f8f

    • SSDEEP

      768:5stVBjHeY2xUSc2xoEYGZc+dySGri6CbEYKhqgbEYhhigbEYhh8gbEYuIQY7EH4z:5spHoC

    Score
    10/10

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks