Overview

overview

7

Static

static

3

bfe6f69626...d2.exe

windows7-x64

7

bfe6f69626...d2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfe6f69626b91ef3a05ba038ed35f8d2

  • Size

    907KB

  • Sample

    240311-flyd5scd86

  • MD5

    bfe6f69626b91ef3a05ba038ed35f8d2

  • SHA1

    da1101da243b9abd72e17ff4e9ade10d62779f3e

  • SHA256

    20264f92462b2e408cc5c2e3f5f89a8ec08785a629000457c563ca27a85ecc2b

  • SHA512

    0b50167ea8e8fec56e915df67f59348b5cede141c03210e3a658d6df5992a3e9ab8e7beb838be926ffe0e888c3117aba81fe9e1f7356ac6c30373a60c4686fb0

  • SSDEEP

    24576:nlYRZ3eXAvefihBPs6UAtl+Pygiaqa/ZS1:niT3tveahNXftl+PpbqgS

Score
7/10

Malware Config

Targets

    • Target

      bfe6f69626b91ef3a05ba038ed35f8d2

    • Size

      907KB

    • MD5

      bfe6f69626b91ef3a05ba038ed35f8d2

    • SHA1

      da1101da243b9abd72e17ff4e9ade10d62779f3e

    • SHA256

      20264f92462b2e408cc5c2e3f5f89a8ec08785a629000457c563ca27a85ecc2b

    • SHA512

      0b50167ea8e8fec56e915df67f59348b5cede141c03210e3a658d6df5992a3e9ab8e7beb838be926ffe0e888c3117aba81fe9e1f7356ac6c30373a60c4686fb0

    • SSDEEP

      24576:nlYRZ3eXAvefihBPs6UAtl+Pygiaqa/ZS1:niT3tveahNXftl+PpbqgS

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks