Overview

overview

7

Static

static

3

5bacc31369...d1.exe

windows7-x64

7

5bacc31369...d1.exe

windows10-2004-x64

7

$PLUGINSDIR/efoaq.dll

windows7-x64

1

$PLUGINSDIR/efoaq.dll

windows10-2004-x64

1

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bacc31369d00e6209ddad20e9b3a3d1

  • Size

    558KB

  • Sample

    240115-az539aeaem

  • MD5

    5bacc31369d00e6209ddad20e9b3a3d1

  • SHA1

    225fef8ae3b0ea4fe0d824fe3d4e91d6453943ea

  • SHA256

    06fd4d290117d8601ae557c494e43e6fa2edb48b796d51262aa77a862dbca1f7

  • SHA512

    384da6b7243db84d3168657c8e3d604a7ef21795f7bde526c202cff4ff72573af64944e25464e8a66a5a07be754683ac00b6b8461a487e9995ee3c0857d7ecdf

  • SSDEEP

    12288:2dFlIyk87PxAFXQuNY+C2NoQCKK4b0JKxXBJ9wzLQjmPic:2dFl7kSJuNDGRJcR/w3LP

Score
7/10

Malware Config

Targets

    • Target

      5bacc31369d00e6209ddad20e9b3a3d1

    • Size

      558KB

    • MD5

      5bacc31369d00e6209ddad20e9b3a3d1

    • SHA1

      225fef8ae3b0ea4fe0d824fe3d4e91d6453943ea

    • SHA256

      06fd4d290117d8601ae557c494e43e6fa2edb48b796d51262aa77a862dbca1f7

    • SHA512

      384da6b7243db84d3168657c8e3d604a7ef21795f7bde526c202cff4ff72573af64944e25464e8a66a5a07be754683ac00b6b8461a487e9995ee3c0857d7ecdf

    • SSDEEP

      12288:2dFlIyk87PxAFXQuNY+C2NoQCKK4b0JKxXBJ9wzLQjmPic:2dFl7kSJuNDGRJcR/w3LP

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/efoaq.dll

    • Size

      120KB

    • MD5

      c642b341e69cd35ca434cb5d046415b7

    • SHA1

      b292770856b5689445a88b58fa2f9a477b4a1231

    • SHA256

      5db3d75eeb1b3f5b2cc28c5ac0c13441f944d0095d212d06afd4aa5548708b9f

    • SHA512

      e873ff5cbb711323560516cb581a7bb756f45828abb4f0c27605b07e98713e92ede29db772adac1fdaba078f48b8202a670b965d088a2b51f967b105d692bc0c

    • SSDEEP

      1536:yhdeTMPViwLdiIuoV/E35+E1mmbfkRNn9RSLMPJFGrnaB3ZoJrMSfU:yaTO4IuwyhbydjJFGc3Z+ISc

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks