Overview

overview

7

Static

static

3

OhSoft OCa...m].rar

windows7-x64

3

OhSoft OCa...ED.rar

windows7-x64

3

AMPED/Patch.exe

windows7-x64

7

amped.nfo

windows7-x64

1

file_id.diz

windows7-x64

3

OhSoft OCa....0.exe

windows7-x64

4

Visit www....om.url

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OhSoft OCam 520.0 Multilingual [PeskTop.com].rar

  • Size

    8.9MB

  • Sample

    240127-p5pe1sedck

  • MD5

    b833c48638d64d279c94746da627aaf6

  • SHA1

    147124376e44c8364d1a64cde91dd257231363e1

  • SHA256

    d51b7294cc83f1b78ed24992fa74fe20599427fbf65fb20a01b85a3acb31bc40

  • SHA512

    344bfdea024c5385335c4456842a384e30b8a712dfcc298e7da33acfc53d3b4e6390e9b5812a38424a7bd27c80e62f79d8bf2ce6572fff059deee9617c29fba0

  • SSDEEP

    196608:gdpVZgJ9kQrdOqaFbHiCtD+8NO9q2csB4OP5o6ihrrwMDTyfUMB:2TZtQU8kDFNOzcy4Y5o6awIO

Score
7/10

Malware Config

Targets

    • Target

      OhSoft OCam 520.0 Multilingual [PeskTop.com].rar

    • Size

      8.9MB

    • MD5

      b833c48638d64d279c94746da627aaf6

    • SHA1

      147124376e44c8364d1a64cde91dd257231363e1

    • SHA256

      d51b7294cc83f1b78ed24992fa74fe20599427fbf65fb20a01b85a3acb31bc40

    • SHA512

      344bfdea024c5385335c4456842a384e30b8a712dfcc298e7da33acfc53d3b4e6390e9b5812a38424a7bd27c80e62f79d8bf2ce6572fff059deee9617c29fba0

    • SSDEEP

      196608:gdpVZgJ9kQrdOqaFbHiCtD+8NO9q2csB4OP5o6ihrrwMDTyfUMB:2TZtQU8kDFNOzcy4Y5o6awIO

    Score
    3/10
    behavioral1

    • Target

      OhSoft OCam 520.0 Multilingual [PeskTop.com]/AMPED.rar

    • Size

      70KB

    • MD5

      87b14b9680c54e141e27130a93888a17

    • SHA1

      fba7ea2d00bf789057604cb5e886da1198b25a89

    • SHA256

      0d962fee764ec8e0f6b175c53b6e03d2722d736d15638c5326e36f7da94ee45c

    • SHA512

      e66af34020bfc1b4733002002c3ef2315f6f35bd96feefce958d25bc26731f3b01dc3fba11562dfe06e0eb02e4896b27df6eaee21c2da6deefe13a893d341f39

    • SSDEEP

      1536:jZAwZikPUO9iXtxAfHlqCp5pFlwuXgkgBxgbNG62w:9Awd8wHcCnKuXgnBxgZzt

    Score
    3/10
    behavioral2

    • Target

      AMPED/Patch.exe

    • Size

      61KB

    • MD5

      b92968370e9c611e64b339ec9fc09fa8

    • SHA1

      4e0599109a3f86de69739e74aa0bfee304ca4fc8

    • SHA256

      b85a445a6f11ef7427ee0f7cb9f7fd84a6e67ea663d7f3b70358d45050e3ef18

    • SHA512

      860eb58929984b791c91996eeecbfc14aed6f8c49e1094d445ffed1fa66eb2acac9ad8e4ba6281c0f57f6df87f3d691bb426be8bc9812267017faa827c8c42cf

    • SSDEEP

      1536:4wZikPUO9iXtxAfHlqCp5pFlwuXgkgBxgbNG:4wd8wHcCnKuXgnBxgZ

    Score
    7/10

    • Loads dropped DLL

    behavioral3

    • Target

      amped.nfo

    • Size

      4KB

    • MD5

      5a7c0ff818fdef7993d6c3c051d0d025

    • SHA1

      ab77018d6925d66c4e9e126be445ef912540924c

    • SHA256

      895a56626a19d478409dc854a87be4f1fa1e4d5c02420a9a61be58df90de07ee

    • SHA512

      1107c70383420c7a92b28054ad9a6aad53d5d019cb1e50461a56ce6907f34c2e37bbb9f36a43228df79785b935a8115f63073b36d9335addd11823e24c9d92c2

    • SSDEEP

      48:xG6fjX7BEpXoviLR6N8SOiMF0LDRgTQcm+kywXcO5sYh1m/:xNX7BEmWR6WSOiMWLtji7O3m/

    Score
    1/10
    behavioral4

    • Target

      file_id.diz

    • Size

      304B

    • MD5

      68e5f45e300a811208a8b9ef0536d1c0

    • SHA1

      e494fd0fe1dd743428fcfea441624143bdf71bdd

    • SHA256

      0b50191cae6f1f9cc13aba4798f596693330cfff7b9541160ecd9bc401c80477

    • SHA512

      7c3a5a547ed1097104e04b4e0286a2d76fb91d1b9b5e6294d6b1adc03d0a7caa601b6dc4864f468f8a885564ae7c3a89ed7e778039ba8404ae6f21ad6c2ed8b6

    Score
    3/10
    behavioral5

    • Target

      OhSoft OCam 520.0 Multilingual [PeskTop.com]/oCam_v520.0.exe

    • Size

      9.0MB

    • MD5

      dafaa1c179061339bbf77c479e2deba7

    • SHA1

      6f753b3da62450e5e19e67e3992ffeeb784b017b

    • SHA256

      507b0b3a008cb04c5a56cb373316bf4b0a4a21e6df187d048ef3d2cf3adb26ee

    • SHA512

      1efe4353ffc7156c750cdc05c5f112f68021031b52d5dfe407f2bb70045089b69bc29c318a289f1264fb751f6d35cdf26e6856d56b5cabd158b85f0c01423c9c

    • SSDEEP

      196608:z+NOLLzqBCmhHs2ZScpZJNzWdxNPqYWSQDSWREjzOvZPqtjJbcTkE/41s:iGLeBRxs2DZJNadxNSvSDj0ZPqrbukw1

    Score
    4/10
    behavioral6

    • Target

      Visit www.pesktop.com.url

    • Size

      122B

    • MD5

      ec78904d048134a63c41a2dd63a5b201

    • SHA1

      31423c68a5d5a9401a973d2cbd6c8d84607821d6

    • SHA256

      42e647086d0d6d89c283279ab7974260ed242b0b925d683c8856af8c004ea430

    • SHA512

      e0edfec56103424fe78d6e6d32ae80c91369bd2327753c970ef778ac585467e31a2413b00a46d569b256b3b81fd005cd69167890714fb50384722c1a0cc5e861

    Score
    1/10
    behavioral7

MITRE ATT&CK Enterprise v15

Tasks