Overview

overview

8

Static

static

1

MoneyPrint...deo.sh

ubuntu-18.04-amd64

1

MoneyPrint...deo.sh

debian-9-armhf

1

MoneyPrint...deo.sh

debian-9-mips

1

MoneyPrint...deo.sh

debian-9-mipsel

1

MoneyPrint...art.py

windows7-x64

3

MoneyPrint...art.py

windows10-2004-x64

8

MoneyPrint...che.py

windows7-x64

3

MoneyPrint...che.py

windows10-2004-x64

3

MoneyPrint...AFM.py

windows7-x64

3

MoneyPrint...AFM.py

windows10-2004-x64

3

MoneyPrint...ach.py

windows7-x64

3

MoneyPrint...ach.py

windows10-2004-x64

3

MoneyPrint...Tts.py

windows7-x64

3

MoneyPrint...Tts.py

windows10-2004-x64

3

MoneyPrint...ter.py

windows7-x64

3

MoneyPrint...ter.py

windows10-2004-x64

3

MoneyPrint...ube.py

windows7-x64

3

MoneyPrint...ube.py

windows10-2004-x64

3

MoneyPrint...fig.py

windows7-x64

3

MoneyPrint...fig.py

windows10-2004-x64

3

MoneyPrint...nts.py

windows7-x64

3

MoneyPrint...nts.py

windows10-2004-x64

3

MoneyPrint...ron.py

windows7-x64

3

MoneyPrint...ron.py

windows10-2004-x64

3

MoneyPrint...ain.py

windows7-x64

3

MoneyPrint...ain.py

windows10-2004-x64

3

MoneyPrint...tus.py

windows7-x64

3

MoneyPrint...tus.py

windows10-2004-x64

3

MoneyPrint...ils.py

windows7-x64

3

MoneyPrint...ils.py

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    MoneyPrinterV2-main.zip
  • Size 58KB
  • Sample240302-q5e21sec54
  • SHA256 354f58076d89492a4981405a3c62f569be8a7505beca5f9443a9b649f8c6bbd7
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoverylinuxpersistence

Malware Config

Targets

    • Target
      MoneyPrinterV2-main/scripts/upload_video.sh
    • Size 774B
    • SHA256 ae7f4444a29820daf4d1a6b3aff0d4f221e983958f306ad3cd0830e9d4a398aa
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4
    • Target
      MoneyPrinterV2-main/src/art.py
    • Size 282B
    • SHA256 f6748581f4e8bf5b6814c29830f991fc1b75f8bb7163660ebeab706c4b9a24ca
    • MD5 SHA1 SHA512
    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral5behavioral6
    • Target
      MoneyPrinterV2-main/src/cache.py
    • Size 4KB
    • SHA256 04f2bed94f992183034e4a6f2faf8e493c03b84f5c09a4e4fe153113e753b360
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral7behavioral8
    • Target
      MoneyPrinterV2-main/src/classes/AFM.py
    • Size 4KB
    • SHA256 b5dc6b8fecadd2b983ec4e10909efd854de374899653bd022a9016215518eb85
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral10behavioral9
    • Target
      MoneyPrinterV2-main/src/classes/Outreach.py
    • Size 7KB
    • SHA256 5ebe83a3a3878cd7dab9cdec2f989c1dbcdfe9e7bc4c21d513b0afb5145fb73c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral11behavioral12
    • Target
      MoneyPrinterV2-main/src/classes/Tts.py
    • Size 2KB
    • SHA256 2dd36c6aff7f528781997d5e50b3bcadb0b4b77f41c9784d89f9c8f9425b4001
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral13behavioral14
    • Target
      MoneyPrinterV2-main/src/classes/Twitter.py
    • Size 6KB
    • SHA256 5ea95b66761121009990c8f79ff97ddf1e7b9a96a4b7b9d78a603aaf5a6fd618
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral15behavioral16
    • Target
      MoneyPrinterV2-main/src/classes/YouTube.py
    • Size 23KB
    • SHA256 e7b90b187c682efb23a4696dc2e14af1357519e09485de94ee8f401c9e804910
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral17behavioral18
    • Target
      MoneyPrinterV2-main/src/config.py
    • Size 6KB
    • SHA256 f6c2a958b3140f1e70dc4fd4ba533b674e82b160f3261c0b2ac2fc90df2dc71e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral19behavioral20
    • Target
      MoneyPrinterV2-main/src/constants.py
    • Size 1KB
    • SHA256 6fb69ee003bb1ec7c00686aecf5c2618b915b8b0fbd924c729331772662148c4
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral21behavioral22
    • Target
      MoneyPrinterV2-main/src/cron.py
    • Size 1KB
    • SHA256 348624117587e5ff647380646600dc5347d3c9391aeeb277f4007a12f89114f2
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral23behavioral24
    • Target
      MoneyPrinterV2-main/src/main.py
    • Size 13KB
    • SHA256 56312c87f17179c45e64d573b95dfc56fb939fa0f5dce7cd928d5e2c67ed20ec
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral25behavioral26
    • Target
      MoneyPrinterV2-main/src/status.py
    • Size 1KB
    • SHA256 bf656074d7f07688f25adaa931d573c3ebad7d9cc553ac6ec90e2e648dfb8971
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral27behavioral28
    • Target
      MoneyPrinterV2-main/src/utils.py
    • Size 2KB
    • SHA256 9c0758ddf24b3d8e4c1de796845098579f205d23974b86e4cac207c7accf3430
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral29behavioral30

MITRE ATT&CK Enterprise v15

Tasks