General

  • Target

    c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952.exe

  • Size

    2.3MB

  • Sample

    240507-b3p2waff48

  • MD5

    5e8b2209cb045cb86442ea395d3d83e6

  • SHA1

    b8156aa934fed6f62847ec2c2ddc4109ad7a07a0

  • SHA256

    c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952

  • SHA512

    bcabebe98b0b5b8ba880f857eefe28bb281003a23626cfa974f0d486e9b4aca821776ee1f8e446303fb543cb29f5237384c300db6adfd956bfab2fb8e3fc741c

  • SSDEEP

    49152:AwLMWLWc7wH2Cj5tzfk7/QUSSWrYanZdZDPyFhoxhnXqhZqezoQ:zLMU4265tzc7/BSSoYWBDEhAJqhtzo

Score
10/10

Malware Config

Targets

    • Target

      c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952.exe

    • Size

      2.3MB

    • MD5

      5e8b2209cb045cb86442ea395d3d83e6

    • SHA1

      b8156aa934fed6f62847ec2c2ddc4109ad7a07a0

    • SHA256

      c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952

    • SHA512

      bcabebe98b0b5b8ba880f857eefe28bb281003a23626cfa974f0d486e9b4aca821776ee1f8e446303fb543cb29f5237384c300db6adfd956bfab2fb8e3fc741c

    • SSDEEP

      49152:AwLMWLWc7wH2Cj5tzfk7/QUSSWrYanZdZDPyFhoxhnXqhZqezoQ:zLMU4265tzc7/BSSoYWBDEhAJqhtzo

    Score
    9/10
    • Detects executables containing URLs to raw contents of a Github gist

    • Detects executables manipulated with Fody

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks