Overview

overview

7

Static

static

3

479965df66...32.exe

windows7-x64

7

479965df66...32.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    479965df665799efd52abad0d5c2e432

  • Size

    385KB

  • Sample

    240107-a56xqsbcbj

  • MD5

    479965df665799efd52abad0d5c2e432

  • SHA1

    c96f9ae923e268520952e72e37b2f4193ef830a1

  • SHA256

    7acbf152064b8284b8835375c8dd9f1b5f0b5bf24506aa559fcb41d7e321a073

  • SHA512

    320996131a8a72a16bf55ce13cd91a73ecef1087d6660468226b8e5f78d9b2015812a6c09fd537d3df577e8d36fcdaa0bec002adaa17d11f01862eb2c7ccf0f3

  • SSDEEP

    12288:F7oEUFQwlwj/DMhqQMK2t2habvNSytuaPPEB:F7/MhqFOpycaPPEB

Score
7/10

Malware Config

Targets

    • Target

      479965df665799efd52abad0d5c2e432

    • Size

      385KB

    • MD5

      479965df665799efd52abad0d5c2e432

    • SHA1

      c96f9ae923e268520952e72e37b2f4193ef830a1

    • SHA256

      7acbf152064b8284b8835375c8dd9f1b5f0b5bf24506aa559fcb41d7e321a073

    • SHA512

      320996131a8a72a16bf55ce13cd91a73ecef1087d6660468226b8e5f78d9b2015812a6c09fd537d3df577e8d36fcdaa0bec002adaa17d11f01862eb2c7ccf0f3

    • SSDEEP

      12288:F7oEUFQwlwj/DMhqQMK2t2habvNSytuaPPEB:F7/MhqFOpycaPPEB

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks