Overview

overview

7

Static

static

3

DasFederationTool.exe

windows7-x64

7

DasFederationTool.exe

windows10-2004-x64

7

DasFederationTool.pyc

windows7-x64

3

DasFederationTool.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DasFederationTool.exe

  • Size

    12.2MB

  • Sample

    240525-v63lxsca7s

  • MD5

    ff147fd7405d041ac298355bd8f4dae1

  • SHA1

    68a44d46ca10794fe6d9880d74bd402fbddf35e4

  • SHA256

    1b2be9c8cbbb48ff9b5b0f70467f52fcffea41dbd8dd771828d7dea5a539ff7e

  • SHA512

    33c4da29c210e1e0123a0b03ccc43d1c0b5039a878c66aad53a429206c7a7cad6728c137e7d34797864d6b99d72a86ead63ef2ca4559013f131a375d953c6194

  • SSDEEP

    393216:dmg4UJWQsUcR4NzK1+TtIiFvY9Z8D8CcldEkwoyK5:d14UYQFS1QtI6a8DZcX6K5

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      DasFederationTool.exe

    • Size

      12.2MB

    • MD5

      ff147fd7405d041ac298355bd8f4dae1

    • SHA1

      68a44d46ca10794fe6d9880d74bd402fbddf35e4

    • SHA256

      1b2be9c8cbbb48ff9b5b0f70467f52fcffea41dbd8dd771828d7dea5a539ff7e

    • SHA512

      33c4da29c210e1e0123a0b03ccc43d1c0b5039a878c66aad53a429206c7a7cad6728c137e7d34797864d6b99d72a86ead63ef2ca4559013f131a375d953c6194

    • SSDEEP

      393216:dmg4UJWQsUcR4NzK1+TtIiFvY9Z8D8CcldEkwoyK5:d14UYQFS1QtI6a8DZcX6K5

    Score
    7/10

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      DasFederationTool.pyc

    • Size

      39KB

    • MD5

      093dc390c7db1bfde1dad1b0c07e5bc5

    • SHA1

      0088f2df5565e3f57d8d83fcfa08d1dd2b28783c

    • SHA256

      a3b4ee739625680f822fb4841b4c498df069b877d4ed882a0ebeabde64cfc258

    • SHA512

      f4ab0c159e946879859997f820f6575bc8c40c56c48507685ffbcaab7f3334b56d347ae4b198cb82e443a4f41f97674771d40678eff54518f87a4cb1bd69035b

    • SSDEEP

      768:cO2F8I1qUcYLxb5vfOm2o9KxXSm54Qdhm6G:cOE87jcx8mEl54QbRG

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks