Resubmissions

25/02/2024, 10:39

240225-mpxqcahg53 10

25/02/2024, 10:38

240225-mpjtgshg45 10

25/02/2024, 10:30

240225-mjyepahf25 10

General

  • Target

    FivemV3.rar

  • Size

    21.4MB

  • Sample

    240225-mjyepahf25

  • MD5

    a60f12b22c6cbe259f9c3575f80edf9a

  • SHA1

    c76a50590886d9b0770257fb3af691bc62146258

  • SHA256

    4c74578e5ab8344705e190d98c001496d97a99ba4822a6e311b32c220003981a

  • SHA512

    fbe4e01ef45241741b61554f83208ed8821daca5dc97d3371311a97fc98b0d50240031aba8c90b07dfe8df5127b7eb8bb580a022e553700dd05c5c7bc57038f7

  • SSDEEP

    393216:EYgne8faqi+il7WVPZ2xaLvpQTomInfK7kri2fDNhF5ph/MDnCP8PCCyEPFsZJ:0zfaqi+i9+cxaKCnOmimPph/MDnZPZy1

Malware Config

Targets

    • Target

      main.exe

    • Size

      21.6MB

    • MD5

      61f52b4fcc0379e3da69bf3fc3814793

    • SHA1

      89e6c1c1483d111661b8f9aa97ad641bc1ed685e

    • SHA256

      3946313fea511e28f2b831a31925bdc1a9d27c9e2cba53c5c6faceb03b824d36

    • SHA512

      33d98bfb0642bf3fb639d587b54aecec4c0a8267c03f698fb6d7d906b8326f5cca8d3c6c01832d900fc99b22144b6bf58a32c263880d3290680c044cbeb63792

    • SSDEEP

      393216:DqPnLFXlrPAQ8DOETgs5fGFbKgQDgrxvE4AD87ym:GPLFXNPAQhEphRM

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      main.pyc

    • Size

      7KB

    • MD5

      15fae625d47efe6b691acd6a50987c3a

    • SHA1

      341f19162d6da69c1f1954468c7457ef48262641

    • SHA256

      1a414050e6bf2796faa629ac68cf656862be8f1cb5131ca01ea249b05dac230e

    • SHA512

      26f9297fe2c12b6cd7e7324bd4ffc5d055e4289aad34ef6929f9a9b531bb2448da30d41d71d03941197af248b590b7825393e6ec897b2e5478f322adf4463849

    • SSDEEP

      192:w3CZ3LPGUD8kL+WdXwfQaR5t7mJhwaK6MdwCeqnw:H7GeCWufNHK2X6P5qw

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks