Resubmissions

28-12-2023 15:39

231228-s3k7csafgr 7

General

  • Target

    Kayflockmp4_1.exe

  • Size

    15.4MB

  • Sample

    231228-s3k7csafgr

  • MD5

    eb5e92ece01989e0d5070f6306cc69c9

  • SHA1

    d4882d0d0dfbc9326c944f779131d11880e913ea

  • SHA256

    91abcd48958ffd621f1068c52dc0d86dc9baf1781e3b4e73e4c44a5c0887d7d1

  • SHA512

    bd060afeffc65f391a19c1dbceb3d301385088dfe6c74cd913343383809eec3d3cb6dbf4f54bd12be72c6449987eb40b7692155ef2c4efee51194cf65d1352e5

  • SSDEEP

    393216:uWvz+XOVV63etEL+9qzT7Ck+7q301Jc1bWXdWCUI:Pz+XOLI+9q/Z301QcVUI

Malware Config

Targets

    • Target

      Kayflockmp4_1.exe

    • Size

      15.4MB

    • MD5

      eb5e92ece01989e0d5070f6306cc69c9

    • SHA1

      d4882d0d0dfbc9326c944f779131d11880e913ea

    • SHA256

      91abcd48958ffd621f1068c52dc0d86dc9baf1781e3b4e73e4c44a5c0887d7d1

    • SHA512

      bd060afeffc65f391a19c1dbceb3d301385088dfe6c74cd913343383809eec3d3cb6dbf4f54bd12be72c6449987eb40b7692155ef2c4efee51194cf65d1352e5

    • SSDEEP

      393216:uWvz+XOVV63etEL+9qzT7Ck+7q301Jc1bWXdWCUI:Pz+XOLI+9q/Z301QcVUI

    Score
    7/10
    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks