Overview

overview

10

Static

static

7

Matthew_Mu...er.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Matthew_MultiPinger.exe

  • Size

    1.8MB

  • Sample

    240301-d6cbasbh51

  • MD5

    1afef074f02aa5e7ac9fae28a67c173a

  • SHA1

    9eb580f61b51ea5b30a9d7e741b8b41aa58c086f

  • SHA256

    16e72e7cc4d3ad9995799c2037a7ea0f97c1f1791ea604e123a1c8fbf41d75c5

  • SHA512

    be6186b8e59122608842e077826aec9231c060100be3012b53445a70d09072cc3fe6a9da3ded0e3b22426e1c0ff5af57378b941b514a0d85e52d98b734e81ede

  • SSDEEP

    49152:Mo+9eQjxgvQOZF+Q40vnlob2xfXqtWjs194:z+jgvQOZ4+oS5C9

Score
10/10
ploutusatmbackdoorupx

Malware Config

Targets

    • Target

      Matthew_MultiPinger.exe

    • Size

      1.8MB

    • MD5

      1afef074f02aa5e7ac9fae28a67c173a

    • SHA1

      9eb580f61b51ea5b30a9d7e741b8b41aa58c086f

    • SHA256

      16e72e7cc4d3ad9995799c2037a7ea0f97c1f1791ea604e123a1c8fbf41d75c5

    • SHA512

      be6186b8e59122608842e077826aec9231c060100be3012b53445a70d09072cc3fe6a9da3ded0e3b22426e1c0ff5af57378b941b514a0d85e52d98b734e81ede

    • SSDEEP

      49152:Mo+9eQjxgvQOZF+Q40vnlob2xfXqtWjs194:z+jgvQOZ4+oS5C9

    Score
    10/10
    ploutusatmbackdoorupx

    • Detected Ploutus loader

    • Ploutus

      Ploutus is an ATM malware written in C#.

      backdooratmploutus

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks