General

  • Target

    mpsl-20231005-1029

  • Size

    179KB

  • Sample

    231008-h5vhpsae8t

  • MD5

    9de3ca6971f2b0f134c61d8c4b79404b

  • SHA1

    3d702013c657897a24f8291171ea3ec621606ce8

  • SHA256

    8b817d1b69bc323f0c803ee638b404fe21b6b9ff9f218f56a7e59af506d17ef2

  • SHA512

    58d4deaa31b0fcb33135617252f5aee6128221ebdc62718255a5665bc78b1a48fc50224c4b0e5dfdf4fd11db8cbb428778b2e1edef05dbb70990803594767f21

  • SSDEEP

    3072:WCsnSesZAUOPDlUFm26Y7Djd2PFUL983qrE:WjnSesR6Dk6MDj8CuY

Score
10/10

Malware Config

Targets

    • Target

      mpsl-20231005-1029

    • Size

      179KB

    • MD5

      9de3ca6971f2b0f134c61d8c4b79404b

    • SHA1

      3d702013c657897a24f8291171ea3ec621606ce8

    • SHA256

      8b817d1b69bc323f0c803ee638b404fe21b6b9ff9f218f56a7e59af506d17ef2

    • SHA512

      58d4deaa31b0fcb33135617252f5aee6128221ebdc62718255a5665bc78b1a48fc50224c4b0e5dfdf4fd11db8cbb428778b2e1edef05dbb70990803594767f21

    • SSDEEP

      3072:WCsnSesZAUOPDlUFm26Y7Djd2PFUL983qrE:WjnSesR6Dk6MDj8CuY

    Score
    9/10
    • Contacts a large (44780) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks