Overview

overview

7

Static

static

1

sample.tar

windows7-x64

3

sample.tar

windows10-2004-x64

7

flashrec-1...asroot

debian-9-armhf

1

flashrec-1..._image

debian-9-armhf

flashrec-1...nds.sh

windows7-x64

3

flashrec-1...nds.sh

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc676d896f640dc1ac41361f77eedceb

  • Size

    78KB

  • Sample

    231222-s3nmgsabbr

  • MD5

    dc676d896f640dc1ac41361f77eedceb

  • SHA1

    b40ba96499cfa457729a4ab1203fd0a57a41ef93

  • SHA256

    cc46b1e6b1cd0211ecb6c1fb4a4fa6a6958a0af9e4a2edfdd4632437684cdfbc

  • SHA512

    f883d1ffed886a7dc68315a172b48373d2837ee2274899fbe1b6dd3e2c935d16b47a1b8dcc531f0651d1131f2f74a4e2de6cce9d58a7fe7fd59306c3d63b03c2

  • SSDEEP

    1536:MpuJ0vWjzCtpGZ11vdkJxYgFkkR8ctGD8ynrvSaaNg8XgsPLwAV1Sdj2o:x0vWjrn1vdkJxY+k/yGD84lPiEAmdjf

Score
7/10

Malware Config

Targets

    • Target

      sample

    • Size

      210KB

    • MD5

      d79180ba7892654b7f880fa083887701

    • SHA1

      9487d275653cb8011f4c0849d181bc4c0ac6d238

    • SHA256

      986df8a50c931a3757b8708898e49a5985f90df3a5ef43fe47a3c44fc6ee453f

    • SHA512

      d544b98a1f9809e4e54191e68c342856e1cb33d12aeff91b05efe9034220f5c4c77deb7845ea58b476f6f9e6bf2edadcbdc0c9cbd5a5ff4e395b43f3409abee3

    • SSDEEP

      3072:OicXLoGUxX8FtJTJa75Z78Uf75QT4bebNf7ovvza5C+FWfa09m4wXnnV4tt6:OiQ85a6i5ovvza5QiPnGt

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

    • Target

      flashrec-1.1.2-20090909/assets/raw/asroot

    • Size

      79KB

    • MD5

      7606d4936433f85e2dba04914b2019a3

    • SHA1

      a40181f2d912527af7371c490fbd36e48beb0d3f

    • SHA256

      d95e38553d42d963e33e8e33bba49be8094fdd09c83e37be90a1ec03fe265e1e

    • SHA512

      e730c7490d7763fb753c9481016f7e6a0f3c48450f5bd53376a4dc574d684e2d49c7051aa92bf1813748478b941d14b665d6605b1d7b704e96d9449bac9c96f5

    • SSDEEP

      1536:wT4Mpgeb9Lf7o5lvf9Nlis1zZaFMYJC+FWfazY9yh1p4K4VCJOOUMXyh/QX+Ghn:wT4bebNf7ovvza5C+FWfa09m4wXnnV

    Score
    1/10
    behavioral3

    • Target

      flashrec-1.1.2-20090909/assets/raw/dump_image

    • Size

      9KB

    • MD5

      f37f39cd480697945c6ee52d187636d1

    • SHA1

      b96faee7db8be1fe6baa97d5d101935bf29e07c9

    • SHA256

      053398a15ea3c32ccd305178cfe2ec0eb915f72923614ce6a3876ca446f9be3d

    • SHA512

      4ecdb5852619443c209f2ff041a1f34dfaad3df31b85869d2013847c07832814ff0f8e86241d23ff5b5ffd0b9844b56dc7c7393da88c1b2216f74fe50e698619

    • SSDEEP

      96:8Hpku2oPLM8euEN9nlsgrt6maVVQbKZBGedrHhgeFzNTDPJDLRVaJVWuS6T/6co:7uBM8eu8IA6maWgAmBgePTP2WuS6T

    Score
    1/10
    behavioral4

    • Target

      flashrec-1.1.2-20090909/assets/raw/writecommands.sh

    • Size

      299B

    • MD5

      0ed924c07fa3036ccfe2e53741c746c3

    • SHA1

      7dce8dad0891eead2d5e1191efafa3a1018d22dc

    • SHA256

      5650745fb4247c2597ea1ca5dca304fefd21dd9e705d67901d68dc51ad608b4b

    • SHA512

      a86c9ba320a8570d3335cfd46135867da89b1df490722dbdcaa89b0f9c037a58b95dd17f883f77d913a7efb52e639ebb705fc6314255d0a2cf0b3e54fd2e749c

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks