Overview

overview

6

Static

static

3

ef40057c0a...21.exe

windows7-x64

6

ef40057c0a...21.exe

windows7-x64

6

ef40057c0a...21.exe

windows10-1703-x64

6

ef40057c0a...21.exe

windows10-2004-x64

6

ef40057c0a...21.exe

windows11-21h2-x64

6

Resubmissions

26-04-2024 06:47

240426-hkqc9aba9v 6

26-04-2024 06:47

240426-hkprqabb44 6

26-04-2024 06:47

240426-hkn57abb42 6

26-04-2024 06:47

240426-hkmx5aba9t 6

26-04-2024 06:47

240426-hkmmcsba81 6

25-04-2024 13:14

240425-qgyt8aba6y 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521

  • Size

    131KB

  • Sample

    240426-hkqc9aba9v

  • MD5

    fa158ba3d7801e203da61c7eafa12a13

  • SHA1

    eb71f862c7603797a9d7d46bda545f7d9280f451

  • SHA256

    ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521

  • SHA512

    0f47c06526cb8d0e8302e440baac91e49e1fa3541e8d86e724c46dcc3b4ba2ffae445b3d217d58cb8ff66380036b98e82fc7b6f3980120d4c599d5497ce5edd1

  • SSDEEP

    1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImz2:BLxUyjp3xCTyDMsUWyw+Ubx7NX

Score
6/10
persistence

Malware Config

Targets

    • Target

      ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521

    • Size

      131KB

    • MD5

      fa158ba3d7801e203da61c7eafa12a13

    • SHA1

      eb71f862c7603797a9d7d46bda545f7d9280f451

    • SHA256

      ef40057c0a5784ed71b745826c84c2a4d52bf9f50cc6ca4b723716a0be4ce521

    • SHA512

      0f47c06526cb8d0e8302e440baac91e49e1fa3541e8d86e724c46dcc3b4ba2ffae445b3d217d58cb8ff66380036b98e82fc7b6f3980120d4c599d5497ce5edd1

    • SSDEEP

      1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImz2:BLxUyjp3xCTyDMsUWyw+Ubx7NX

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks