Overview

overview

7

Static

static

3

b84a0dc1ca...4b.exe

windows7-x64

7

b84a0dc1ca...4b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b84a0dc1ca694d220ebbe516004fc14b

  • Size

    907KB

  • Sample

    240307-khyyqage7z

  • MD5

    b84a0dc1ca694d220ebbe516004fc14b

  • SHA1

    6b9a583e3d79ab63e9c3f5479ef7154cd6dba439

  • SHA256

    c18fcdf659b58af7f6123ebb9044247127334b26fe6a7b6aa7e57f7818c4efbf

  • SHA512

    ecb7335653709d89ff8964ba5ab34b30cde5c2bbd34e6c115f10e5997f74dfdaebcd6737aef7a159bf9f681976831cbebcf07e39bb634218e8f411547bcc283c

  • SSDEEP

    12288:rDMYVmwxsaMcjpkyqBCY7HAPzVlgRW+GYIGmwDbuamVjVDa/ZS1:wBMpaUY7gPcRBIGnDbua4a/ZS1

Score
7/10

Malware Config

Targets

    • Target

      b84a0dc1ca694d220ebbe516004fc14b

    • Size

      907KB

    • MD5

      b84a0dc1ca694d220ebbe516004fc14b

    • SHA1

      6b9a583e3d79ab63e9c3f5479ef7154cd6dba439

    • SHA256

      c18fcdf659b58af7f6123ebb9044247127334b26fe6a7b6aa7e57f7818c4efbf

    • SHA512

      ecb7335653709d89ff8964ba5ab34b30cde5c2bbd34e6c115f10e5997f74dfdaebcd6737aef7a159bf9f681976831cbebcf07e39bb634218e8f411547bcc283c

    • SSDEEP

      12288:rDMYVmwxsaMcjpkyqBCY7HAPzVlgRW+GYIGmwDbuamVjVDa/ZS1:wBMpaUY7gPcRBIGnDbua4a/ZS1

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks