General

  • Target

    Galaxy Swapper v2.exe

  • Size

    76.0MB

  • Sample

    231013-lv6d1agc6w

  • MD5

    0a7df43f2c6987915fe008787008ac2b

  • SHA1

    03a2cff3572a5f01b3677df9ea6e4009acc1f0bf

  • SHA256

    3fe2a4b474771a6b9c66ffc317b37599da776203a4fb22fd58ddf1bb18e220eb

  • SHA512

    93773ef0265c38bcbf361b436c9902adb7932f9d88725e3a34cfebf9bf711652ab4cb3773502aa081aed87aebe999b75ad45bc35aaf3b2544f6c5836eb94e7c1

  • SSDEEP

    1572864:72MgkQiZLSk8IpG7V+VPhqWZE7lftWZNbWlXxTa9k4VTWcaUVBRIYqF:7Zgk3xSkB05awWj7K3Ty9VT1aUVTIYq

Malware Config

Targets

    • Target

      Galaxy Swapper v2.exe

    • Size

      76.0MB

    • MD5

      0a7df43f2c6987915fe008787008ac2b

    • SHA1

      03a2cff3572a5f01b3677df9ea6e4009acc1f0bf

    • SHA256

      3fe2a4b474771a6b9c66ffc317b37599da776203a4fb22fd58ddf1bb18e220eb

    • SHA512

      93773ef0265c38bcbf361b436c9902adb7932f9d88725e3a34cfebf9bf711652ab4cb3773502aa081aed87aebe999b75ad45bc35aaf3b2544f6c5836eb94e7c1

    • SSDEEP

      1572864:72MgkQiZLSk8IpG7V+VPhqWZE7lftWZNbWlXxTa9k4VTWcaUVBRIYqF:7Zgk3xSkB05awWj7K3Ty9VT1aUVTIYq

    Score
    9/10
    • Enumerates VirtualBox DLL files

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks