Overview

overview

8

Static

static

3

7127440e9d...9b.exe

windows7-x64

8

7127440e9d...9b.exe

windows10-2004-x64

8

$TEMP/kR9R5GkiZB.dll

windows7-x64

7

$TEMP/kR9R5GkiZB.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7127440e9d76292b88e36df44ed5479b

  • Size

    68KB

  • Sample

    240124-cggztafhc9

  • MD5

    7127440e9d76292b88e36df44ed5479b

  • SHA1

    ab3b0b9ec6530e9dbdc1d70fd3c7572954a47046

  • SHA256

    5d2d957299e0b7b24198393dfb954fd03822dcf46874abcc5054d971ab446b81

  • SHA512

    e23c5dbd21baf496143003f11a6976a16b5f16f9f92ce7e45abcacaa4ce5db3a2ccfffe39ac13e1d7eed828dd10ce3692e552f9f28a4e85db36b91c5340b98b2

  • SSDEEP

    1536:KpgpHzb9dZVX9fHMvG0D3XJbC4b6B08HnSIdBky7xwrc+HpQQ:IgXdZt9P6D3XJbC4mB0QHj7xwrc2pQQ

Score
8/10

Malware Config

Targets

    • Target

      7127440e9d76292b88e36df44ed5479b

    • Size

      68KB

    • MD5

      7127440e9d76292b88e36df44ed5479b

    • SHA1

      ab3b0b9ec6530e9dbdc1d70fd3c7572954a47046

    • SHA256

      5d2d957299e0b7b24198393dfb954fd03822dcf46874abcc5054d971ab446b81

    • SHA512

      e23c5dbd21baf496143003f11a6976a16b5f16f9f92ce7e45abcacaa4ce5db3a2ccfffe39ac13e1d7eed828dd10ce3692e552f9f28a4e85db36b91c5340b98b2

    • SSDEEP

      1536:KpgpHzb9dZVX9fHMvG0D3XJbC4b6B08HnSIdBky7xwrc+HpQQ:IgXdZt9P6D3XJbC4mB0QHj7xwrc2pQQ

    Score
    8/10

    • Blocklisted process makes network request

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $TEMP/kR9R5GkiZB.dll

    • Size

      67KB

    • MD5

      0926c75dcfb71173c22ed89e44ea6f78

    • SHA1

      012ecac790739f5b92f207ff9f1cbb4dc86516e3

    • SHA256

      40055fa711c4e132099cc760c6b8f10423233b6543be153d7e895a5af1070d55

    • SHA512

      4f761af8f8bec360ae3842d57f12648f6cfca1355954e55b882b983022849b8004dfca61015a913ccf2f0f0e93b6dd853d4710c7d5bdbf738a7c3a12f1ba3608

    • SSDEEP

      1536:w3A1mzmabNdopbmBQdTP66LNMGF51Bct4EB7:BIopjTP6+NxC

    Score
    7/10

    • Deletes itself

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks