General

  • Target

    mass-dm.exe

  • Size

    10.9MB

  • Sample

    240513-pqxsvafc84

  • MD5

    dfc126427f4061c2669c713f8ed6277b

  • SHA1

    602a01a03e0fac12350b06693e7dabed7e3fba37

  • SHA256

    69400dfaf7444bfe95aad5bf945b12d404bd5b62fb895d82dadd9548ed4a810b

  • SHA512

    737e647c4330b57b2c5898936218f6fb937a143dc754ee0335b66ec4ea21021c18d3eeeba13e55aa69d186dae61311a032d5f0369a90f06f27495d9c3f034024

  • SSDEEP

    196608:+Lavs+H7zj9AKm6gUU8gBk6bL2Vmd6+DnoulOToPVIn+LH/+zY+0T4YlhLT/AM:HD3GH6YkUL2Vmd6moFTodIn+LH/+z04

Score
7/10

Malware Config

Targets

    • Target

      mass-dm.exe

    • Size

      10.9MB

    • MD5

      dfc126427f4061c2669c713f8ed6277b

    • SHA1

      602a01a03e0fac12350b06693e7dabed7e3fba37

    • SHA256

      69400dfaf7444bfe95aad5bf945b12d404bd5b62fb895d82dadd9548ed4a810b

    • SHA512

      737e647c4330b57b2c5898936218f6fb937a143dc754ee0335b66ec4ea21021c18d3eeeba13e55aa69d186dae61311a032d5f0369a90f06f27495d9c3f034024

    • SSDEEP

      196608:+Lavs+H7zj9AKm6gUU8gBk6bL2Vmd6+DnoulOToPVIn+LH/+zY+0T4YlhLT/AM:HD3GH6YkUL2Vmd6moFTodIn+LH/+z04

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      EXEC MASS DM.pyc

    • Size

      4KB

    • MD5

      b836b1649b778a6182b5f6b10170f53e

    • SHA1

      6f7ff6e0cd62911e905f318a67f766413b4511df

    • SHA256

      6f174026cd6f4c0de67ad2a9d9b88ca62bb01724117117ad7dcb464c5b38b655

    • SHA512

      572032fa9a08928b53a7548dc31dfd875fda96273e8fb26f8bbf2eb3d7d33d357dca468532e81783ad17a1bcd4e59431578b827e6d2fb1108402dff63df340f6

    • SSDEEP

      48:bqe4x9xwOpkTdnVZzGy2vuOeK4JHniNYwzjOUzj4A6j4uXe6fuYjFqC:meepOVZCy2vuOeK4JHniNL3x4Z4uXe9G

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks