General

  • Target

    SecuriteInfo.com.W32.PossibleThreat.12284.2848

  • Size

    1.1MB

  • Sample

    240119-t9jsjsafa7

  • MD5

    066f7a7a2def52268b5a89fcb22b670e

  • SHA1

    1a61dbc7fe6068d984fdf5c11b4eb797bd8a0d9b

  • SHA256

    f0e6714475274a3480d0c0841d37b38e13cf53389503ed68e06623e34abfd1eb

  • SHA512

    a180c99e8a5a2a792f13aafeb5202ac2af51b1c158ebee7f8b31added7885bea1d0f2c0bf695358659ac70dd96d4da36f96f7d9fba1819f646dcbd8325853682

  • SSDEEP

    24576:cHobdGqpNe6soZ3FcDGJHJT1XqdiePugA+4:cIMqjtguImZ

Malware Config

Targets

    • Target

      SecuriteInfo.com.W32.PossibleThreat.12284.2848

    • Size

      1.1MB

    • MD5

      066f7a7a2def52268b5a89fcb22b670e

    • SHA1

      1a61dbc7fe6068d984fdf5c11b4eb797bd8a0d9b

    • SHA256

      f0e6714475274a3480d0c0841d37b38e13cf53389503ed68e06623e34abfd1eb

    • SHA512

      a180c99e8a5a2a792f13aafeb5202ac2af51b1c158ebee7f8b31added7885bea1d0f2c0bf695358659ac70dd96d4da36f96f7d9fba1819f646dcbd8325853682

    • SSDEEP

      24576:cHobdGqpNe6soZ3FcDGJHJT1XqdiePugA+4:cIMqjtguImZ

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks