Analysis

  • max time kernel
    147s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-03-2024 02:15

General

  • Target

    malware-sample-library-master/APT28 FancyBear/LoJaxSmallAgent.exe

  • Size

    17KB

  • MD5

    595aff5212df3534fb8af6a587c6038e

  • SHA1

    1771e435ba25f9cdfa77168899490d87681f2029

  • SHA256

    dcbfd12321fa7c4fa9a72486ced578fdc00dcee79e6d95aa481791f044a55af3

  • SHA512

    281d601178ac8a1e589a3ae8ba0e324b180aa3dde121eee399448beb6752b67c0cf0add7a99913816e23d9985bf9a2b1dee7495ca018f1583cab52b30d7607e0

  • SSDEEP

    384:R1Wx2a/j+qDaF400vvnIPxAvDJ1SvAPnXnG1l:R1I2ab+qq400nnIpAN1SvAP36

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\malware-sample-library-master\APT28 FancyBear\LoJaxSmallAgent.exe
    "C:\Users\Admin\AppData\Local\Temp\malware-sample-library-master\APT28 FancyBear\LoJaxSmallAgent.exe"
    1⤵
    • Loads dropped DLL
    PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\malware-sample-library-master\APT28 FancyBear\LoJaxSmallAgent.dll

    Filesize

    17KB

    MD5

    10036063be45f92a9a743425fbf5abc7

    SHA1

    d70db6a6d660aae58ccfc688a2890391fd873bfb

    SHA256

    3f48dbbf86f29e01809550f4272a894ff4b09bd48b0637bd6745db84d2cec2b6

    SHA512

    a2fc426489193993e97fe3cedd529f52702c1f0d7a348960cbe5955b173cb8e1b77d117f389afd1db55a8bd33a81a72ceb6088fe5175927921e120f9fea82493