General

  • Target

    Xylex_Executor_V1.2.rar

  • Size

    10.8MB

  • Sample

    240509-r4btmshh98

  • MD5

    720cc843dc613c7e5266016adecafcc5

  • SHA1

    aa62cd7fa0a407f35d14dbc94f79eedbde15450b

  • SHA256

    b462fb0c6aa61e992f7777643f124ed7742a89c121df99929d3bcd8f3a92e28d

  • SHA512

    ca757b7cb7089db7274dab30c90ee77c09a58a8d5817f3b6dff55154696876050b5075c55f1f3d8db625f86f8f0c5b73021336e83558d79d401090cfd1a34a85

  • SSDEEP

    196608:QaV7QUcqKJtri2jrz7OLEVxHIRHXJ5OM2zXVNVAlbixK30ObibbDOix9phR:QfRD+LiuJ5OMANOlbCK3tCD7hR

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

https://github.com/ptsd9/script/releases/download/launcher/launcher.exe

Targets

    • Target

      Xylex_Executor_V1.2.rar

    • Size

      10.8MB

    • MD5

      720cc843dc613c7e5266016adecafcc5

    • SHA1

      aa62cd7fa0a407f35d14dbc94f79eedbde15450b

    • SHA256

      b462fb0c6aa61e992f7777643f124ed7742a89c121df99929d3bcd8f3a92e28d

    • SHA512

      ca757b7cb7089db7274dab30c90ee77c09a58a8d5817f3b6dff55154696876050b5075c55f1f3d8db625f86f8f0c5b73021336e83558d79d401090cfd1a34a85

    • SSDEEP

      196608:QaV7QUcqKJtri2jrz7OLEVxHIRHXJ5OM2zXVNVAlbixK30ObibbDOix9phR:QfRD+LiuJ5OMANOlbCK3tCD7hR

    Score
    10/10
    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks