General

  • Target

    ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30

  • Size

    62KB

  • Sample

    240505-gc8zysbh43

  • MD5

    e5ee54a39dfd85d2a84f2f9b3339a1ed

  • SHA1

    e9ee7b2a729bc375c42ac016683c1855cca1dd84

  • SHA256

    ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30

  • SHA512

    998effda9642bc08c24c492daf3ede3738ad41c058fa2b7eb34c93a8c64f265b9941cb23575a37c8a3dbd413539a664b81fe6e06798bcac51e98581064b61a98

  • SSDEEP

    1536:zbPMSzSOYSkIFB7YvSnJTRoXv6v8Gp3ESOA/g4V:zt2OYbIFpY6nJayTqSOAb

Score
8/10

Malware Config

Targets

    • Target

      ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30

    • Size

      62KB

    • MD5

      e5ee54a39dfd85d2a84f2f9b3339a1ed

    • SHA1

      e9ee7b2a729bc375c42ac016683c1855cca1dd84

    • SHA256

      ebab35e7f458f8524baaac1fd59b97090c17eab513e0b83b7de6a73cd8b41b30

    • SHA512

      998effda9642bc08c24c492daf3ede3738ad41c058fa2b7eb34c93a8c64f265b9941cb23575a37c8a3dbd413539a664b81fe6e06798bcac51e98581064b61a98

    • SSDEEP

      1536:zbPMSzSOYSkIFB7YvSnJTRoXv6v8Gp3ESOA/g4V:zt2OYbIFpY6nJayTqSOAb

    Score
    8/10
    • Contacts a large (622) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks