Overview

overview

7

Static

static

7

AgataSoft_...ro.exe

windows7-x64

7

AgataSoft_...ro.exe

windows10-2004-x64

1

as_shutdown.exe

windows7-x64

7

as_shutdown.exe

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    528c1c5791eac02487d4b68bcad94174

  • Size

    1.5MB

  • Sample

    240111-e7n7xsfef3

  • MD5

    528c1c5791eac02487d4b68bcad94174

  • SHA1

    47c18ede30398fb579b086d87e69b8d7ef0d5a33

  • SHA256

    36a7f66d6a393b9aa5dd3247da230403d0930d41fbf3b67ff0be2461d8381caa

  • SHA512

    19d60676959aba060f546d7c23464e9b916b8b7661fc42ea772c5cb46d190ea589dd92b9163f0e95f99b8d757cace37f5c6a674d97fae64cd14d81aeffac5e57

  • SSDEEP

    24576:4bvw2dui07B/y7HgRFqjmkGqBo9vVK3/k1BMx2Qek48MhYUfLz7q5tKncsa7PxbW:4bxdneOHgDqy1qII38PfQekihGKS4ita

Score
7/10
upx

Malware Config

Targets

    • Target

      AgataSoft_ShutDown_Pro.exe

    • Size

      617KB

    • MD5

      0122ddbe43cbff9e200426e9be93b977

    • SHA1

      ebed662b2953059c9c3f9387e86d71b8ec20edb6

    • SHA256

      b3ebe5db0512345cbf7d501031f4a5048fcb3a63233d032e3c235b89dd09cea8

    • SHA512

      738d46ed198aa8a804b513261c63199d3c92e6136c713849f6a7d033d118d76dfc0b178b7267ebf55a1332612af9fde5438e5a2787fe233b85ea9e6e06fc4d8f

    • SSDEEP

      12288:80sY+d+r8e8tk6AjVr6fD/+6Y++7UC6/73HDcc4UJAkdsv9Bi:6Y+deT6+VW2x++7h6/73jccFAk

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      as_shutdown.exe

    • Size

      993KB

    • MD5

      9fab95726150863f6cce07ffad600e9b

    • SHA1

      d912f5deda45132f7e50de8ab0b6b60f96bb11bb

    • SHA256

      016eac48c45139583e82d2be2d903e70b199859ea01d939a686c090b62b666da

    • SHA512

      7053af47af32ece7dd4408ff4bc78a22b763c7b4d557f76f4df374d1e817d7ace016fa1f83037c48b12eb21f99244c28bd40dfe47e170271971a150ed1fe9a15

    • SSDEEP

      24576:Z2ebGsiDGTjD7L/bwhkQ9AvVjHriPfoN9Y7OzZfY2Q6w+Pq7:Z2aGHDGj7L/bAeVjroK6GZA9S8

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral3behavioral4

    • Target

      新云软件.url

    • Size

      261B

    • MD5

      af534adca72cbb40fcaba6adcf4aa0b3

    • SHA1

      486f64259c45baf815004b6ffc65301e82aecdee

    • SHA256

      1bbc2bfe53979f537c179995a1d1b5030db3ad6f2e46b258421506a3fb0fc296

    • SHA512

      21d4b21c0d228498275640b397e8adfcb92dca4996cb59b035eeea523c5fd0594b0c8bc66d557265343bf6e7cb35350790fcac323db841c0cd4fea6da38b70b1

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks