Overview

overview

8

Static

static

1

detonator.cmd

windows7-x64

detonator.cmd

windows10-2004-x64

g3[1].htm

windows7-x64

g3[1].htm

windows10-2004-x64

rbwbr.vbs

windows7-x64

8

rbwbr.vbs

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    LvHBSTUiEIxOhuvSdZNALrnOtncMZS94ElgICFQRu9o.bin

  • Size

    1KB

  • Sample

    231012-ljt7laba5s

  • MD5

    80e149de19f14d4dd5bfbbf4e0558f87

  • SHA1

    b5093afe46b233bac6b7c42ebd3eb1e012bbfcfa

  • SHA256

    2ef1c1493522108c4e86ebd27593402eb9ceb6770c652f78125808085411bbda

  • SHA512

    18abccc83d381f7e9e4d2b49d7b38efb398fc012cc108fce12e4f254418a6a8cdfe05e1e650c38fccd04db4c8923d8d3c256a133eecc3576dd8a426b4668de4b

Score
8/10

Malware Config

Targets

    • Target

      detonator.cmd

    • Size

      288B

    • MD5

      ceab8ac7b36b94baa85153b6e72564e2

    • SHA1

      6eba1310c4f4f6bcb12e89b4d2dcf12364ab80de

    • SHA256

      c8ed4f48e259f0880c890d39ce586940fa1235afc2f0e9c458509e62855e66e0

    • SHA512

      3ea7ae68c4b8b87261eb55419cfa06911b13a1afbe1ada104592ffd8b6404ed8313af5102647790489ab677a74fe77e6dffcfd36d4d310ea23ecea1e3d278e66

    Score
    1/10
    behavioral1behavioral2

    • Target

      g3[1].htm

    • Size

      313B

    • MD5

      67b0e3cf552292840ef3cd2496749c7d

    • SHA1

      c9478d863e01871d9ed9794168b63fceea2e958d

    • SHA256

      57adf088b677ba0b394ad21a2c6a94a8ab5fd436f70c8f97064af3c70156ce5e

    • SHA512

      636a1f37fd070a37fc6a0d55e196b1243cfdd2989ac62e1ef849ddbaaaf0d3cd054ee240d48c65830a245a62ccd9e9ff56996262297e6423aa9de5927c9ffa49

    Score
    1/10
    behavioral3behavioral4

    • Target

      rbwbr.vbs

    • Size

      132B

    • MD5

      377cc069c81f7f2e2efb2c7e0d8e31d3

    • SHA1

      27fb7c79b874050dc8c3d3bd1537688af0bc337f

    • SHA256

      2e688c808a23566d30bad5953e7cbfdd2a2fd440be5bc6c6cdfc67530e2656ea

    • SHA512

      0ab63cefccea9928e3b598adab6c0c58f1072cfede1a37affd0bf0753b578e433ec64fdaecf96b63098b8538271cbb3de59ea0800d91fec2938d4bb87bae6f15

    Score
    8/10

    • Blocklisted process makes network request

    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks