General

  • Target

    Sunware.exe

  • Size

    6.9MB

  • Sample

    240104-jezkeadgf6

  • MD5

    35bcb5e654e2bc50daa1179b27b9db5e

  • SHA1

    c3ec4017a7d78cb2394f4ef2f1c4891bf9e35594

  • SHA256

    3e834c3bddefa4c1604c8caad3eb14e521e331c0e562d3f108c2fd64b20e6497

  • SHA512

    6283d996f4dbf4381007d2eb0d8f678e8cab35222a0656e959440e2f1505274b3c2534c0f2499332cb663f64a9b45d07b5d4aed219d4175e2da6ddf0228d83e6

  • SSDEEP

    98304:+R/DjWM8JEE1rUamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeROYKJJcGhEIF7:+V0FeNTfm/pf+xk4dWROtrbWOjgdI

Score
10/10

Malware Config

Targets

    • Target

      Sunware.exe

    • Size

      6.9MB

    • MD5

      35bcb5e654e2bc50daa1179b27b9db5e

    • SHA1

      c3ec4017a7d78cb2394f4ef2f1c4891bf9e35594

    • SHA256

      3e834c3bddefa4c1604c8caad3eb14e521e331c0e562d3f108c2fd64b20e6497

    • SHA512

      6283d996f4dbf4381007d2eb0d8f678e8cab35222a0656e959440e2f1505274b3c2534c0f2499332cb663f64a9b45d07b5d4aed219d4175e2da6ddf0228d83e6

    • SSDEEP

      98304:+R/DjWM8JEE1rUamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeROYKJJcGhEIF7:+V0FeNTfm/pf+xk4dWROtrbWOjgdI

    Score
    10/10
    • Deletes Windows Defender Definitions

      Uses mpcmdrun utility to delete all AV definitions.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks