General

  • Target

    Debug.rar

  • Size

    727KB

  • Sample

    240510-egcq7scf78

  • MD5

    1e22cc9d96434410733a30e530168a7b

  • SHA1

    9434342440a16466a23e94c0cbbdd4da9e7210c3

  • SHA256

    8c9cc7b566af93ac4abfc518053c66b8bf63252afdfe31f4c13f96037f964e00

  • SHA512

    ddcf7578dc07c47ba1ca89568751f56fe96cef54953dafdb2dd34fd37878ea9dc5c134dee016194b3763d400fab7b8dcec70eb7001c5025a26c1c5a174ba45f4

  • SSDEEP

    12288:YlrRjI28Zc4DJm1Zh//+RYHLI+IqRLTKtEenmtSUSwNnT3kvkzhZ4lGYQBKvfx8x:YXdVBn+mHE4LGtEedWT3mkzQQBMf2x

Score
7/10

Malware Config

Targets

    • Target

      Guna.UI2.dll

    • Size

      2.0MB

    • MD5

      f217e8054b7dbbcbd4ab10baf4750588

    • SHA1

      b1c3089e6b895e6415c36beb82516746e19d2b55

    • SHA256

      6a542d4e68417d91d0a21f9e5b85449959325b29e2410c3ef1df7526dd091194

    • SHA512

      ba778f3c3819364954b6681bbdb87cf9ca2c34d8b0e6e76df665a2d93a94c9b421893a977960d24a908bc9b7209749fee65c930ef0776a0195265193846fe56e

    • SSDEEP

      24576:d+NEfBpDsH/bTIRPZyiXeq+Tc7XRbF+TSgkrwf9Pa3oZm8jqG4LEx1npSBeX673f:dB9+OgRpUwXpUeXQq5dn

    Score
    1/10
    • Target

      WindowsFormsApp3.exe

    • Size

      84KB

    • MD5

      115f22d1bea21df0ccd6ff4ccf9ba672

    • SHA1

      d02d4aee1141cbb7c729accd28acd9a26c453149

    • SHA256

      ef0d5ab419ea117ec9384c15c737aa0c9b3182456787679e529f9f38295367ab

    • SHA512

      8dd369163dd91c921cc13ed65aaf14062be6ca538494323d6c21c4e7db68790da5a92b6084d4d0fcd0fc0912ffd15c15d34767244047b817d5174fb6aa9ae02a

    • SSDEEP

      1536:gAkFA/NERAidtkT6EgkeeMhtVq+yQXBwyQNX7cyxOE093dZ2qRj53y:gpFA/NERAUtkT6EgkeRhu+JXBw/4yx7f

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Matrix

Tasks