General

  • Target

    5c0cd1e14d8703ca46e0188f7185a6721c2f0c7d8b53898a94f4056a69bb374f

  • Size

    947KB

  • Sample

    240327-y73j4aef7t

  • MD5

    92e69ceffb9c36fe67c6f5e3a40eb2f5

  • SHA1

    1711e33a58f6b13f9fb31a5d6793282bd7140725

  • SHA256

    5c0cd1e14d8703ca46e0188f7185a6721c2f0c7d8b53898a94f4056a69bb374f

  • SHA512

    d0bc467dcd807c6b89dbcfef233fcc4e6ce9df1fc1c5e28a449a4eddd050cdf07db2deec9c7115d11f1aa0ea4531fe5c8ae8f7f006869d26357b8775b8779396

  • SSDEEP

    12288:3q4ZGeKHCItsW2tlO8dyp7mI5w+5OZhdWp+GT4wefxoGnaDtjVDa/ZSnC77Jh7:3q4ZGnHCW2tlOWppA8x5oJa/ZSC77Jh7

Score
9/10

Malware Config

Targets

    • Target

      5c0cd1e14d8703ca46e0188f7185a6721c2f0c7d8b53898a94f4056a69bb374f

    • Size

      947KB

    • MD5

      92e69ceffb9c36fe67c6f5e3a40eb2f5

    • SHA1

      1711e33a58f6b13f9fb31a5d6793282bd7140725

    • SHA256

      5c0cd1e14d8703ca46e0188f7185a6721c2f0c7d8b53898a94f4056a69bb374f

    • SHA512

      d0bc467dcd807c6b89dbcfef233fcc4e6ce9df1fc1c5e28a449a4eddd050cdf07db2deec9c7115d11f1aa0ea4531fe5c8ae8f7f006869d26357b8775b8779396

    • SSDEEP

      12288:3q4ZGeKHCItsW2tlO8dyp7mI5w+5OZhdWp+GT4wefxoGnaDtjVDa/ZSnC77Jh7:3q4ZGnHCW2tlOWppA8x5oJa/ZSC77Jh7

    Score
    9/10
    • Detects executables (downlaoders) containing URLs to raw contents of a paste

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks