General

  • Target

    Start11.7z

  • Size

    28.8MB

  • Sample

    231112-we3naahg5y

  • MD5

    0450a355a9291292cec2d1af5b56b95c

  • SHA1

    f6616f9f722773b9b50ebe5cea73c706370114e1

  • SHA256

    b5995f5a29276a920facbb76b65bc50bc95f5e71ffd8d7fb396515ed13f21716

  • SHA512

    a191810883754c30fb3d4677bb8d095d2ceeb21c499a79e684f68390566d44f62800726ad3b9e1f5141486421858d2bb72200084cd9856deaedd65fc553517af

  • SSDEEP

    786432:6MYeLiuEm7USd3YrWwzAbqX+CFohaw7oLQ:66LARii0bqXo9D

Score
7/10
upx

Malware Config

Targets

    • Target

      Start11.7z

    • Size

      28.8MB

    • MD5

      0450a355a9291292cec2d1af5b56b95c

    • SHA1

      f6616f9f722773b9b50ebe5cea73c706370114e1

    • SHA256

      b5995f5a29276a920facbb76b65bc50bc95f5e71ffd8d7fb396515ed13f21716

    • SHA512

      a191810883754c30fb3d4677bb8d095d2ceeb21c499a79e684f68390566d44f62800726ad3b9e1f5141486421858d2bb72200084cd9856deaedd65fc553517af

    • SSDEEP

      786432:6MYeLiuEm7USd3YrWwzAbqX+CFohaw7oLQ:66LARii0bqXo9D

    Score
    3/10
    • Target

      Readme.txt

    • Size

      100B

    • MD5

      107d4df5be9956210081551a798973a0

    • SHA1

      eb5127381c0f715e7be444e87236c04804259602

    • SHA256

      c81c9058cde5158b05cede2bc60f929a8231d1b37510cd1412239d34264d6e66

    • SHA512

      79298118bb71727acae69643ac2678eba8af596074343632f7d7b0e6afc0fe4e081116212052a6c2e7fd44a0a562ec7e68f80b223118aed740f7f9dabf9e4549

    Score
    1/10
    • Target

      Setup.exe

    • Size

      29.1MB

    • MD5

      539cecdde961c32b2e4ead2d055f88e7

    • SHA1

      208c5fd22b31bd8f049038779ac400f47a23173c

    • SHA256

      c7d6b381c1bb07a36c83719f7d027f32908d4afdd3bf95c2855ee17240b07ade

    • SHA512

      e47c979fe385fe8607562d4292b103853b08bbc04996b1ab81297a21431c00fa05626354e1b25f6b1fd2d882476dc563be5e573d61762c3e773db7d0af943b34

    • SSDEEP

      393216:WW4rKN1smHWVFir3p/nKNrTLKZyaA9R2gxwb+d2ClmCi1NYub7aKoCc1jNfPmTBK:byKd/nmrCZtGCSksEiCc1kV6bAwFVCM

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Silent.cmd

    • Size

      12B

    • MD5

      b5bd9c610cfa992abe5be79853c4366e

    • SHA1

      6a39ed56c06f430d05d6388b4e2c78d73e3843ff

    • SHA256

      2c4dfb3e8496e059ac2dee560e230f50063c110253b4b4bd61cd63bba04b76de

    • SHA512

      449864a964c0269cd5f9b6b2629cfac78219d74ffb8ba00decd5a4d56633f63f9d3e8adcd13d1c9be93a873ca04b46c4410d4f98f8463e3b593d8554a8c45f4c

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks