General

  • Target

    sunny_executer.exe

  • Size

    9.9MB

  • Sample

    240505-pddjfahf4y

  • MD5

    2eb483f6ee574ea7174bb05050dea0cf

  • SHA1

    a8d4aea833ab8ed06606b0a950837e893adc94ae

  • SHA256

    9f6ead7d6b37989420cd81201e342f509511d4c73fb55ebae242d684ea767d6f

  • SHA512

    d925fed5faa2e63a5a5b23d1b91951f7ba52cac164adb12167047b9897edc15204a188abf09043376b40b6b8e69f2c300594b0333898538904e8b256304e1113

  • SSDEEP

    196608:IhhAARrjj1W903eV4QFMToEuGxgh858F0ibfU9au5p0W8/LQhoANNngABbknNeCK:6hW+eGQFMTozGxu8C0ibfEau5qW80hoA

Malware Config

Targets

    • Target

      sunny_executer.exe

    • Size

      9.9MB

    • MD5

      2eb483f6ee574ea7174bb05050dea0cf

    • SHA1

      a8d4aea833ab8ed06606b0a950837e893adc94ae

    • SHA256

      9f6ead7d6b37989420cd81201e342f509511d4c73fb55ebae242d684ea767d6f

    • SHA512

      d925fed5faa2e63a5a5b23d1b91951f7ba52cac164adb12167047b9897edc15204a188abf09043376b40b6b8e69f2c300594b0333898538904e8b256304e1113

    • SSDEEP

      196608:IhhAARrjj1W903eV4QFMToEuGxgh858F0ibfU9au5p0W8/LQhoANNngABbknNeCK:6hW+eGQFMTozGxu8C0ibfEau5qW80hoA

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

    • Target

      sunny_executer.pyc

    • Size

      3KB

    • MD5

      1c3340e535cac3c0e61bd19c583c57ed

    • SHA1

      a3d396fd5c1607fd1d47348540b1d9d732a8cbf6

    • SHA256

      a5fadc6f87e7789f051375c89b4abfb3c92acc4d69c2691f574e3c6dfac0017d

    • SHA512

      db6e6fd306338ebe4808417bb7d5a1008780e5268bebdf45b8f1dc870344bc69cbce31fcb4ac8e772a5a525ddd8a649f3476c95c681a8689f8337f9ba76db541

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks