Resubmissions

27-03-2024 08:32

240327-kfer3abe4t 1

27-03-2024 07:46

240327-jmfr9sag5w 7

General

  • Target

    BurpSuite-Pro-Latest-main.zip

  • Size

    41KB

  • Sample

    240327-jmfr9sag5w

  • MD5

    6d5b135d28659b51d71283a7fa3e89e5

  • SHA1

    086311ab9ff996d0c6d16fbb12bc659c3ddfaa97

  • SHA256

    3098f25ad4622236901e519161f053c59cabbbcb54141f09de9d959bd0eb35dd

  • SHA512

    0b9554fb11faabf46e950a411faa0acbb5d8ae811cf4dd38133670d8cddc225695d55adf37378a3c0cd7ac79cdca5c16372edc04dfe5f7c0a4d498ca102bb9eb

  • SSDEEP

    768:sCER7pNX8nL9XhVCJFj2cYO/Z00PEA8i3VKt285F8jtBKclbkE:BER7jMnxXhwhY/0AWVy2G0vZ

Score
7/10

Malware Config

Targets

    • Target

      BurpSuite-Pro-Latest-main/install.sh

    • Size

      1KB

    • MD5

      8c648636e2f6ca8db67674150393b688

    • SHA1

      770ac26ca403b812f95a499b3245313f7bf3cdc0

    • SHA256

      9dae4a39b8aefb68246a8f7287954c5e91c8b85dd43bf753257fd07bd4f93311

    • SHA512

      d9b2188ee48efe8172c61a4e20dc98651cf59c85be08238f6ccee2712a02edc2c941a34fc2e420ace2be98426e49fc30c2628de220088aed907f14b57b0e88c0

    Score
    7/10
    • Executes dropped EXE

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Writes file to system bin folder

    • Target

      BurpSuite-Pro-Latest-main/loader.jar

    • Size

      29KB

    • MD5

      56a0eef3a96bf373db1298bc6cb63158

    • SHA1

      f9fb9175a901f4fede20b9d61eb4fadafdd1feea

    • SHA256

      1e288c686963eafc34411d4f94265eb1809492ab57a474848669eb3285a2afb3

    • SHA512

      d6165e567c80cd04c2506f285d48fb3e2dd6d46e4eda3b9bf76c2ea585ac446807ccabc02c4f8a6bede36a8ac1d1737eab3840cfdc703123daeccd526593f492

    • SSDEEP

      768:ccLie6lYEKyYSfk8tyPAR8NVgJMvtWHw1QgHpA:NLie6lYEKyYSfkwNY+MvtuWQgG

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Hijack Execution Flow

1
T1574

Discovery

Virtualization/Sandbox Evasion

1
T1497

Tasks