Overview

overview

10

Static

static

10

96362573cc...c29.js

windows11-21h2-x64

6

Resubmissions

18-04-2024 14:48

240418-r6rb4sgb22 10

11-02-2024 09:54

240211-lxlsdagh99 10

02-02-2024 12:22

240202-pkb9ysdfd5 10

14-01-2024 01:01

240114-bc9zcsabb4 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96362573cc5e47dbbefa8c9a0a775055b19bbc3c67b9a328a632d2da19bf4c29

  • Size

    366KB

  • Sample

    240418-r6rb4sgb22

  • MD5

    faa5c1602d97a596cbe130aca048bc6a

  • SHA1

    5df32e61bc6d49b6b8dbdf637fb7e5f54d1b981f

  • SHA256

    96362573cc5e47dbbefa8c9a0a775055b19bbc3c67b9a328a632d2da19bf4c29

  • SHA512

    f765277d12e041976d528b4921684ed320c5ed277d7d2036b82b87f2ad35b3c2b0742f4bcb0e13aa5081c72ba8a9aa27ed40be5d63ea5da759f36359d3b70bee

  • SSDEEP

    3072:MtJHg/rntoaLx8RvZ1jO7iTqEoDOYW2HfLcGAoaKTkmB5MjA3fV3edY:bTng/aimtKYBT0SRVUY

Score
10/10
agenttesladarkcometdarktracklockfilem00nd3v_loggermassloggermatiexmountlockershurkstormkittyvulturixmrigzeppelininfostealerminer

Malware Config

Targets

    • Target

      96362573cc5e47dbbefa8c9a0a775055b19bbc3c67b9a328a632d2da19bf4c29

    • Size

      366KB

    • MD5

      faa5c1602d97a596cbe130aca048bc6a

    • SHA1

      5df32e61bc6d49b6b8dbdf637fb7e5f54d1b981f

    • SHA256

      96362573cc5e47dbbefa8c9a0a775055b19bbc3c67b9a328a632d2da19bf4c29

    • SHA512

      f765277d12e041976d528b4921684ed320c5ed277d7d2036b82b87f2ad35b3c2b0742f4bcb0e13aa5081c72ba8a9aa27ed40be5d63ea5da759f36359d3b70bee

    • SSDEEP

      3072:MtJHg/rntoaLx8RvZ1jO7iTqEoDOYW2HfLcGAoaKTkmB5MjA3fV3edY:bTng/aimtKYBT0SRVUY

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks