Overview

overview

8

Static

static

1

484323e010...b5.lnk

windows7-x64

8

484323e010...b5.lnk

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    484323e010793b16594c9d92694ea1ef275d8a588e1fcddd6826cdf4cce68db5

  • Size

    9.1MB

  • Sample

    230830-j4hcesaf57

  • MD5

    d7d48592bc21b37c02891e0e036bf26c

  • SHA1

    b791cf55ac70224c5e7c98167bf497c54996fe6e

  • SHA256

    484323e010793b16594c9d92694ea1ef275d8a588e1fcddd6826cdf4cce68db5

  • SHA512

    701df072063081f1ede72081162ef2f7d80550f0065d4789f1d780f5fa0e6885cb07ad6fa77dc2ec11c96cbf47e0cdfa78d125e663d718aab69cdc9521ef1f9e

  • SSDEEP

    1536:F87Z/vCysdk1li8/BTYv+JOIp/vsbzkndElIuFfqqeK7NaXizmA6Jw8BdZ1QDupA:F87QysOJRJOKvu5hcCgZ1k

Score
8/10

Malware Config

Targets

    • Target

      484323e010793b16594c9d92694ea1ef275d8a588e1fcddd6826cdf4cce68db5

    • Size

      9.1MB

    • MD5

      d7d48592bc21b37c02891e0e036bf26c

    • SHA1

      b791cf55ac70224c5e7c98167bf497c54996fe6e

    • SHA256

      484323e010793b16594c9d92694ea1ef275d8a588e1fcddd6826cdf4cce68db5

    • SHA512

      701df072063081f1ede72081162ef2f7d80550f0065d4789f1d780f5fa0e6885cb07ad6fa77dc2ec11c96cbf47e0cdfa78d125e663d718aab69cdc9521ef1f9e

    • SSDEEP

      1536:F87Z/vCysdk1li8/BTYv+JOIp/vsbzkndElIuFfqqeK7NaXizmA6Jw8BdZ1QDupA:F87QysOJRJOKvu5hcCgZ1k

    Score
    8/10

    • Blocklisted process makes network request

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks