General

  • Target

    21052024150420052024MKPASLIN990817.zip

  • Size

    374KB

  • Sample

    240522-xm1z4ach87

  • MD5

    4f1279de8d6638325290d8f78f2c5ac4

  • SHA1

    6cdf1eb5736647e7a7e215ad61684fa4e62c82e9

  • SHA256

    319bcf6da45c3305dd7dba130dfcdbd3997bb0b7fdc0da3983a54e5cd4febca1

  • SHA512

    aa5640e4d204be4ad0e0811a711379b8aa1e8d91882f916320263f18a46e21b0a90d4453c096e21ba4032710cf8f6b6adf6d5de3572510863818839745ff4a99

  • SSDEEP

    6144:VJ37xX6jWAWH86TDwF96OXTqNSn1Q2zHW5OwjEEYeTBlz9h/G4VEHGenTXir99NR:VJrQjWA96TDwz67CXu7ZD9h+4V9enTyD

Malware Config

Targets

    • Target

      MKP-ASL-IN-990817.bat

    • Size

      470KB

    • MD5

      e13a7b69e841ebd3bb4bb32c8f45f130

    • SHA1

      c19a6dd510d3ca0cc2e7073795f8f0d9c07d6bfe

    • SHA256

      590dedddc7f145481d4cb50fbe69e67d7702e1507243ee4ab9e0c4a35d466cb4

    • SHA512

      8cd87ef359d77ab3be6b484569b5625ee8a985a9a12aaceb5b8e6ae2295e09e91b880108ac58d08d355cdf93a3ec733be0ddb4a87ec2577aa9be145b9163ebb1

    • SSDEEP

      12288:vi3hR5SANzRQDmrtD9hM4VjenTYbZhvnHW:K3hv5zRXrtphLVCUZdW

    Score
    10/10
    • Guloader,Cloudeye

      A shellcode based downloader first seen in 2020.

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/Banner.dll

    • Size

      4KB

    • MD5

      0d5428f7920274caedfa8f2ae980e196

    • SHA1

      ce2ca2381a4b9ed9f06f6af5a183a840de290c3f

    • SHA256

      4083bef584ad6793b3d57e3e3f764a31afac876412df65c5da5afee76bbd1e10

    • SHA512

      78419752f3e6579f7caf1f9bab70a46ac2b0a7c5f08eb8604e927baea611c182133ce8d58929a059f22e6c2befb5ff0c24ee6500d0708bc884a65e395ea7c4cf

    Score
    1/10
    • Target

      $PLUGINSDIR/BgImage.dll

    • Size

      7KB

    • MD5

      9436196007f65f0ae96f64b1c8b2572e

    • SHA1

      4b004b5c2865c9450876be83faa8cc96e1d12c01

    • SHA256

      286f246ee18bf91c4a80fa2cdb61077a4bcf0a3fd6582be4b4ab6a5cb3de44c9

    • SHA512

      5c172675fbbea214471ac35eebaa6ab9bd1306268144085adbad3bba4a815430ed028cac169e8b5a6fd00818684f65d7bdd32f11773bc6152e62ef80f895d35e

    • SSDEEP

      96:8egk1LFJaO1/radJEaYtv1Zs4lkL8y3A2EN8Cmy3uT24j7J3kWyy/:t7TJa2roqJyA2EN8diuTHje

    Score
    1/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      8b3830b9dbf87f84ddd3b26645fed3a0

    • SHA1

      223bef1f19e644a610a0877d01eadc9e28299509

    • SHA256

      f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37

    • SHA512

      d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03

    • SSDEEP

      192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      82c3f38cd34739872af07443c65d0bd8

    • SHA1

      1f4ee2d394404a291eda6419f856adaf4b960237

    • SHA256

      59cdb2c12d5635fd25af4007b70222507948be41fa9885b7f07967c2510a5311

    • SHA512

      3a81c0613b1ea906ad4f103b02620217de69a8676dbb7ec41cf31f342a0a74562815a8d4f2efe9866fc16365f58524ac71652e99920acea355f020028775743d

    • SSDEEP

      192:ow8cSzvTyl4tgi8pPjQM0PuAg0YNy+IFtSP:lBSzm+t18pZ0WAg0R+IFg

    Score
    3/10
    • Target

      Isogenous/Textureless/Sabbatters.app

    • Size

      1KB

    • MD5

      6d05f4d490578ac56f35a2fb0fdc48c3

    • SHA1

      98cbe66769dca00383a1e6345a0af8d8f5158802

    • SHA256

      68c60b54d23a7eac7decbd381934147857868b1b5f14a5087cc7d691f68670d6

    • SHA512

      0d038240e209b7b478d66800c76668fe40b10ffca149b1920946fb025ba5f1be9f20cd75e689cae6c9e5d9c2f722bf54b5bc2783602a0379def34be48e6753b5

    Score
    4/10

MITRE ATT&CK Enterprise v15

Tasks