Overview

overview

7

Static

static

3

token_generator.exe

windows10-2004-x64

7

token_generator.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    token_generator.exe

  • Size

    8.9MB

  • Sample

    240419-cfl75sdf25

  • MD5

    8b78a7c8f03a550b0e359f38ee93b837

  • SHA1

    a9dccd428f58639676615c35bf73c7138d3c656f

  • SHA256

    fa3bfb6af65d6b2b89064b1a1f2684afdb9f7f12e6b34356da962d21cf95e98b

  • SHA512

    a6ed37ba4df0830950e9e8ad5ecc2f9bf7a89861b2bf9b74bdb12222ff324423bf2aa7043f938f577f4dd1983a1f9105d97630048e3e971f6906e6f7b35e4a0e

  • SSDEEP

    196608:HdKd4+o2HDfyGgMwBdnpkYRMHqRdqNm8lFt:9P72HDfDgMc6HqWVFt

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      token_generator.exe

    • Size

      8.9MB

    • MD5

      8b78a7c8f03a550b0e359f38ee93b837

    • SHA1

      a9dccd428f58639676615c35bf73c7138d3c656f

    • SHA256

      fa3bfb6af65d6b2b89064b1a1f2684afdb9f7f12e6b34356da962d21cf95e98b

    • SHA512

      a6ed37ba4df0830950e9e8ad5ecc2f9bf7a89861b2bf9b74bdb12222ff324423bf2aa7043f938f577f4dd1983a1f9105d97630048e3e971f6906e6f7b35e4a0e

    • SSDEEP

      196608:HdKd4+o2HDfyGgMwBdnpkYRMHqRdqNm8lFt:9P72HDfDgMc6HqWVFt

    Score
    7/10

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

    • Target

      token_generator.pyc

    • Size

      36KB

    • MD5

      4a617bd7c6120c8a1cf72c203d987fcd

    • SHA1

      b29958bec8ee5bbf7d04ac8d6e14213b37f68ea1

    • SHA256

      dd2dfd5b67ae17f3f5df2fb0333354f5378bf46f56a5e0e403fdca40deabbf80

    • SHA512

      c5dff13440beca18c326140cf2aca3609a6854cafba18e9b0520a1270bf9185e552adf55a308a8f96ff94a9a65cc913f346f50aa877e49daa388cf84353161a1

    • SSDEEP

      768:OW5eNIQBjmHjyBBogIkSBI4OGCq57DdI+Q/Ek:BeN2jL9kSjDRDdIQk

    Score
    3/10
    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Resource Development

Reconnaissance

Tasks