Resubmissions

16/03/2024, 11:11

240316-naqh6abh47 10

General

  • Target

    Zenox_Alt_Generator.exe

  • Size

    17.7MB

  • Sample

    240316-naqh6abh47

  • MD5

    60c44b47fcb953642364c6ec4ce71d64

  • SHA1

    da9fd8d8c8c48f33254f0ace8c06b8be7bf9ac3c

  • SHA256

    85c48f4874abd79f536a0b6988f6aa39c191c91948c5f55b5c3c036119ec1c06

  • SHA512

    0b1791c5f702f2f8dcf39eeb7f65ba28904afb4d02ed6af8450a62ae17fccb35b7f13ba1071cb4c6cd3f11c9b3dc26d164cd0c515dd455bfc5ad1067074f3bf8

  • SSDEEP

    393216:GqPnLFXlrSQ8DOETgsvfGwge3PR/vEOsToQpq:rPLFXNSQhER//uZo7

Malware Config

Targets

    • Target

      Zenox_Alt_Generator.exe

    • Size

      17.7MB

    • MD5

      60c44b47fcb953642364c6ec4ce71d64

    • SHA1

      da9fd8d8c8c48f33254f0ace8c06b8be7bf9ac3c

    • SHA256

      85c48f4874abd79f536a0b6988f6aa39c191c91948c5f55b5c3c036119ec1c06

    • SHA512

      0b1791c5f702f2f8dcf39eeb7f65ba28904afb4d02ed6af8450a62ae17fccb35b7f13ba1071cb4c6cd3f11c9b3dc26d164cd0c515dd455bfc5ad1067074f3bf8

    • SSDEEP

      393216:GqPnLFXlrSQ8DOETgsvfGwge3PR/vEOsToQpq:rPLFXNSQhER//uZo7

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Matrix

Tasks