Overview

overview

10

Static

static

10

vexxo_spooferV2.0.exe

windows7-x64

7

vexxo_spooferV2.0.exe

windows10-2004-x64

7

main.pyc

windows7-x64

3

main.pyc

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    vexxo_spooferV2.0.exe

  • Size

    20.6MB

  • Sample

    240204-jaf79segdj

  • MD5

    9914bb3dc0da7d27b98d17d3870cf55f

  • SHA1

    d9640d7f83eec1678aeb9371a37fd961a3caf479

  • SHA256

    43b2600177b3bc09934bd5800380b2eca62170a4a5d22a1ba77ecd002c138a58

  • SHA512

    57a822adb3a12b871f0b289371dd83c7f611d57ee1fc16f6bc713ec82c4bdee6f94f09fa86fecd7a3a71bdcd979fafb3d6bf0839195ff23ad60bb78d645224b2

  • SSDEEP

    393216:GqPnLFXlrlSeqzbQpDOETgsvfGFwdKg02mvE4/RAkypm:rPLFXNhabQoEk1Gpm

Score
10/10
empyreanpyinstallerupx

Malware Config

Targets

    • Target

      vexxo_spooferV2.0.exe

    • Size

      20.6MB

    • MD5

      9914bb3dc0da7d27b98d17d3870cf55f

    • SHA1

      d9640d7f83eec1678aeb9371a37fd961a3caf479

    • SHA256

      43b2600177b3bc09934bd5800380b2eca62170a4a5d22a1ba77ecd002c138a58

    • SHA512

      57a822adb3a12b871f0b289371dd83c7f611d57ee1fc16f6bc713ec82c4bdee6f94f09fa86fecd7a3a71bdcd979fafb3d6bf0839195ff23ad60bb78d645224b2

    • SSDEEP

      393216:GqPnLFXlrlSeqzbQpDOETgsvfGFwdKg02mvE4/RAkypm:rPLFXNhabQoEk1Gpm

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      main.pyc

    • Size

      7KB

    • MD5

      0f18937986930758ed48a56e1a846172

    • SHA1

      42643fc0696d9fb63997a5ecb75c701024a4be7d

    • SHA256

      a596b4d713799a48e9d3ca68fccbb195b875f10b2e8ce525909e6cf6bb8df526

    • SHA512

      1d4d41f4fe7ae7d6856ba92b50b1edfdb52eadb87c1ca6b0dd0d0f2734436a9221a6a35ebe4ed8d59944ba8e9530721a0d217605159cc7cb2c04bf40648d40f8

    • SSDEEP

      192:wIPhDEgD8t7WdXwNuvBV/gkJhwxt48MdwKnw:y3WuNuf/27bPKw

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks