General

  • Target

    181ff821b035e04a9fde2490e18a9000

  • Size

    385KB

  • Sample

    231225-msxjrahdb7

  • MD5

    181ff821b035e04a9fde2490e18a9000

  • SHA1

    5a8537cd23aaaf31ebb8e040eb50eb3a2d7e6a6f

  • SHA256

    279e81250edb113237a0690490722747f598c2b9c6fa6728204391c39b4ad303

  • SHA512

    943fe8365964908a9b97bb969e4b92ae9bbba2b512e124a83df895d5f056b40c97f955cb05702e8329628a3cc9f272c348d800fc69208fc2327949dcad989ca0

  • SSDEEP

    6144:LphmiQg0WSlpcDk74dRohtR5j2VMJqqPqyCZ5QhJn4Lkp8bXaqGOq2eHwkoszCng:DmZlW4sWRIQPVq55LkpIqIq2eQkoYB

Score
7/10

Malware Config

Targets

    • Target

      181ff821b035e04a9fde2490e18a9000

    • Size

      385KB

    • MD5

      181ff821b035e04a9fde2490e18a9000

    • SHA1

      5a8537cd23aaaf31ebb8e040eb50eb3a2d7e6a6f

    • SHA256

      279e81250edb113237a0690490722747f598c2b9c6fa6728204391c39b4ad303

    • SHA512

      943fe8365964908a9b97bb969e4b92ae9bbba2b512e124a83df895d5f056b40c97f955cb05702e8329628a3cc9f272c348d800fc69208fc2327949dcad989ca0

    • SSDEEP

      6144:LphmiQg0WSlpcDk74dRohtR5j2VMJqqPqyCZ5QhJn4Lkp8bXaqGOq2eHwkoszCng:DmZlW4sWRIQPVq55LkpIqIq2eQkoYB

    Score
    7/10
    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks