Overview

overview

7

Static

static

3

PO 00290292.exe

windows7-x64

7

PO 00290292.exe

windows10-2004-x64

7

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Lection.ps1

windows7-x64

1

Lection.ps1

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    PO 00290292.exe

  • Size

    553KB

  • Sample

    240124-jqd3vadcfk

  • MD5

    cc69508628ade733aa8bd21a0a646514

  • SHA1

    90a270f4529739d82941c6def0efa77eca1a3b09

  • SHA256

    f216c47f4a5f65a59ded595d62c2470ceb14cc1c31c3a8b4667b8fc3eb276cc2

  • SHA512

    c42b7e234dd5473e658687eb6bb1efb9c0dd5742ebdd974242a80c02d01be77305e2522073cc87193fedf02b1c683c48a97d2075a70592356ddc8e216f8e0df0

  • SSDEEP

    12288:0g8/ZwHctOwMltJy48IpD5W0sV5b0AVsOmFUg93m:KeHckwItJy48IPW0Cj6OWU6m

Score
7/10

Malware Config

Targets

    • Target

      PO 00290292.exe

    • Size

      553KB

    • MD5

      cc69508628ade733aa8bd21a0a646514

    • SHA1

      90a270f4529739d82941c6def0efa77eca1a3b09

    • SHA256

      f216c47f4a5f65a59ded595d62c2470ceb14cc1c31c3a8b4667b8fc3eb276cc2

    • SHA512

      c42b7e234dd5473e658687eb6bb1efb9c0dd5742ebdd974242a80c02d01be77305e2522073cc87193fedf02b1c683c48a97d2075a70592356ddc8e216f8e0df0

    • SSDEEP

      12288:0g8/ZwHctOwMltJy48IpD5W0sV5b0AVsOmFUg93m:KeHckwItJy48IPW0Cj6OWU6m

    Score
    7/10

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      01e76fe9d2033606a48d4816bd9c2d9d

    • SHA1

      e46d8a9ed4d5da220c81baf5f1fdb94708e9aba2

    • SHA256

      ee052fd5141bf769b841846170aabf0d7c2bb922c74c623c3f109344534f7a70

    • SHA512

      62ef7095d1bf53354c20329c2ce8546c277aa0e791839c8a24108a01f9483a953979259e0ad04dbcab966444ee7cdd340f8c9557bc8f98e9400794f2751dc7e0

    • SSDEEP

      96:J7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkN738:HbGgGPzxeX6D8ZyGgmkN

    Score
    3/10
    behavioral3behavioral4

    • Target

      Lection.Fle

    • Size

      25KB

    • MD5

      718548247c1303664965903558d95c2f

    • SHA1

      37a83a369f564c019d7bdf7cc936a2eaf7c03ce4

    • SHA256

      a12ee66022e1c0cfb89fd16745aafc346d4a475944c4552888096d6da5823186

    • SHA512

      0f7cc73c3407317cf85be2c5316c8fe547371848494a91b3a95e3e6ecfa0f5bac0284896dfffd954f7cd003125d559534a69f783bda7874cdff62059454ccfec

    • SSDEEP

      384:36dq0MO0QFoK3k8Ae0Z24ftUeQv54J+vkwCc+MMFTbr0UN1DDHa1D0bBJ+mMtz4:6rMO0QFook008gexVCT1Nt61SDMi

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks