Overview

overview

7

Static

static

3

LF1337SPOOF.exe

windows10-2004-x64

7

LF1337SPOOF.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LF1337SPOOF.exe

  • Size

    25.1MB

  • Sample

    240419-p6ks8ada45

  • MD5

    bf5a4bfb74aa9ff334f08d357fbdbac1

  • SHA1

    7db31976d50a428fe2a71dc0a13befe41d2e7bd7

  • SHA256

    685db0fb08f75270256420733df7d3dc20c478742d3679208c89c11b30afcd54

  • SHA512

    db73b74f29898a01bc93796cdb14d945d1b329e74f6d3ea2539a1a9c0e385617fd7d71d4c132437cb01b659efbb03b20378821373447e2b1e1139841819f12a1

  • SSDEEP

    393216:eXxQdXGIYh2Jp5M50FzLNHyZOOOOOOOOOOOOOndYFzLNHyZOOOOOOOOOOOOOn3FB:eXxQ6hAPyRPyUln/N06u6P

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      LF1337SPOOF.exe

    • Size

      25.1MB

    • MD5

      bf5a4bfb74aa9ff334f08d357fbdbac1

    • SHA1

      7db31976d50a428fe2a71dc0a13befe41d2e7bd7

    • SHA256

      685db0fb08f75270256420733df7d3dc20c478742d3679208c89c11b30afcd54

    • SHA512

      db73b74f29898a01bc93796cdb14d945d1b329e74f6d3ea2539a1a9c0e385617fd7d71d4c132437cb01b659efbb03b20378821373447e2b1e1139841819f12a1

    • SSDEEP

      393216:eXxQdXGIYh2Jp5M50FzLNHyZOOOOOOOOOOOOOndYFzLNHyZOOOOOOOOOOOOOn3FB:eXxQ6hAPyRPyUln/N06u6P

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      LF1337SPOOF.pyc

    • Size

      40KB

    • MD5

      9df70ffbb2b98ae0cdade3d644439fc4

    • SHA1

      719eadf9792f19aa482ac957e920b9acf8e07b0d

    • SHA256

      d0bf991319b684072c243293ab8ba924b770817c191b55834de2febc9add5d36

    • SHA512

      e87271f16610cfd5284c642647394ffcf9671e2b79e07934866887f969393d52ae4dd7e06bc8b82c1a243366bad340bf2a33029151a72b2845f9e778b0f78cdf

    • SSDEEP

      768:HOGYfX/18cTiTlC6aaEBfAXvfsiBttbMsnjqmnrD/4mq:uX/ScnqkiBt95eQrC

    Score
    3/10
    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks