General

  • Target

    SecuriteInfo.com.FileRepMalware.32466.30047.exe

  • Size

    16.2MB

  • Sample

    240119-mkdrnscge2

  • MD5

    1409a8b5859cfc13905d30b37b6febe4

  • SHA1

    0e545c330d510a35c95736671d323b27d4571ee6

  • SHA256

    570e6dec1d80315fbb63bd6a7e5fd00847221428bbbe41618df4b3797a41d8a8

  • SHA512

    145718930ca717bf9f65693e270322439daf304e58b6ce95cf44a175cf4e4e64908a5acb194c77b4b63239ad4c9e50d422090d46b246224adf42696059fd6912

  • SSDEEP

    393216:18I6nZPRdxwWSv2qXVr4st4KthyYbGFTrv0qtGqBa:18IqHxwWIrr4st5piJrv0qt5

Malware Config

Targets

    • Target

      SecuriteInfo.com.FileRepMalware.32466.30047.exe

    • Size

      16.2MB

    • MD5

      1409a8b5859cfc13905d30b37b6febe4

    • SHA1

      0e545c330d510a35c95736671d323b27d4571ee6

    • SHA256

      570e6dec1d80315fbb63bd6a7e5fd00847221428bbbe41618df4b3797a41d8a8

    • SHA512

      145718930ca717bf9f65693e270322439daf304e58b6ce95cf44a175cf4e4e64908a5acb194c77b4b63239ad4c9e50d422090d46b246224adf42696059fd6912

    • SSDEEP

      393216:18I6nZPRdxwWSv2qXVr4st4KthyYbGFTrv0qtGqBa:18IqHxwWIrr4st5piJrv0qt5

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks