General

  • Target

    794053841933595ab8254612adff64ea

  • Size

    1.6MB

  • Sample

    231222-jacj3scahm

  • MD5

    794053841933595ab8254612adff64ea

  • SHA1

    a89f8d0458b92f381606331f12db1b29402a0351

  • SHA256

    992588697572cf21a09975cf4ff4665d0a960b38fc460d4bbdb836403d8b4b35

  • SHA512

    a609a6e3f008888ea78457432168a415555fd7f357c23ad71047c24b25930367c5926259a513b963f35a33526007674a737868b62dfecb127c9e9fa4c57ec71a

  • SSDEEP

    49152:9PZS+UeNCPFcakLz0qld0/gHSvTRlibcakLz0O:dZADFcakcqldagyvPibcakcO

Score
7/10
upx

Malware Config

Targets

    • Target

      794053841933595ab8254612adff64ea

    • Size

      1.6MB

    • MD5

      794053841933595ab8254612adff64ea

    • SHA1

      a89f8d0458b92f381606331f12db1b29402a0351

    • SHA256

      992588697572cf21a09975cf4ff4665d0a960b38fc460d4bbdb836403d8b4b35

    • SHA512

      a609a6e3f008888ea78457432168a415555fd7f357c23ad71047c24b25930367c5926259a513b963f35a33526007674a737868b62dfecb127c9e9fa4c57ec71a

    • SSDEEP

      49152:9PZS+UeNCPFcakLz0qld0/gHSvTRlibcakLz0O:dZADFcakcqldagyvPibcakcO

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks