General

  • Target

    MetaLauncher.exe

  • Size

    423KB

  • Sample

    240512-nr9ncsgc55

  • MD5

    e3ed7aedfe71b854293b83ab6c4b68d5

  • SHA1

    54fcb616e0bc16487f6246cdd56b027ee02ad08a

  • SHA256

    4bf3c7c185fc786e9a12774d172390f134cc820889d28bca5dd0184f88e87bc1

  • SHA512

    2567645bf14c7347adb348543901a1294db074e9dcb646012997c82a02721e3546683d457f361137b3f39225da9c4a1cbb4a816b33faa56dd8763bab829cdfe5

  • SSDEEP

    6144:XFWbAsho7gO/OOVceuDvUVGUT7OLb1mrQ3GAE1XvqkA4foihXh:oc/EQOOVcfv+GUTS

Score
7/10

Malware Config

Targets

    • Target

      MetaLauncher.exe

    • Size

      423KB

    • MD5

      e3ed7aedfe71b854293b83ab6c4b68d5

    • SHA1

      54fcb616e0bc16487f6246cdd56b027ee02ad08a

    • SHA256

      4bf3c7c185fc786e9a12774d172390f134cc820889d28bca5dd0184f88e87bc1

    • SHA512

      2567645bf14c7347adb348543901a1294db074e9dcb646012997c82a02721e3546683d457f361137b3f39225da9c4a1cbb4a816b33faa56dd8763bab829cdfe5

    • SSDEEP

      6144:XFWbAsho7gO/OOVceuDvUVGUT7OLb1mrQ3GAE1XvqkA4foihXh:oc/EQOOVcfv+GUTS

    Score
    7/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks