General

  • Target

    textureatlas_to_gif_and_frames_43f7e.exe

  • Size

    29.6MB

  • Sample

    240526-1klzyada4s

  • MD5

    d0d8f4e7a97fcb9267a01873baf82e77

  • SHA1

    8cd8ee8d17c735b03338626e086f94d82c82ade0

  • SHA256

    1ff293a814687900efa1ab3508b9881c32b57372810c2d9b8068ff75ba8e776a

  • SHA512

    c27b004648cda8f2d8109419fae8778daeb9e810a533507f9c4e39d0c76f25f37447142012cbaf89987a280b30866eda6c20b81f1dca403e4b2a321cc2d12dfc

  • SSDEEP

    786432:BaAWfBoq1QtIJ2j6+s7LWB75zuPN6a8DZceCeW8cnVVrK:Bapo2iIJ2qHWB75iVb6NCeWZnr

Score
7/10

Malware Config

Targets

    • Target

      textureatlas_to_gif_and_frames_43f7e.exe

    • Size

      29.6MB

    • MD5

      d0d8f4e7a97fcb9267a01873baf82e77

    • SHA1

      8cd8ee8d17c735b03338626e086f94d82c82ade0

    • SHA256

      1ff293a814687900efa1ab3508b9881c32b57372810c2d9b8068ff75ba8e776a

    • SHA512

      c27b004648cda8f2d8109419fae8778daeb9e810a533507f9c4e39d0c76f25f37447142012cbaf89987a280b30866eda6c20b81f1dca403e4b2a321cc2d12dfc

    • SSDEEP

      786432:BaAWfBoq1QtIJ2j6+s7LWB75zuPN6a8DZceCeW8cnVVrK:Bapo2iIJ2qHWB75iVb6NCeWZnr

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      TextureAtlas to GIF and Frames.pyc

    • Size

      20KB

    • MD5

      6d7f67cda609edb25efc66da2fa47309

    • SHA1

      dfe8c17be51cca2ce9a63c03af570af3f21a3ecc

    • SHA256

      0af2394c1c64060f7443583e91c8391cedf618bfade0dccd74b95c8cebcbd0e1

    • SHA512

      3add73f1c84cc3b6164524882462701b368615c98421ac5e204a844a583c635915550e040b06793249dd65f7b4ee12e8f3d9f5e8881385fc0df486be2ab0abbb

    • SSDEEP

      384:VWxI+sYC1+tKWceay49Nalf6YiyL6hRAw:VWxWYC2K0ahNg6g6hRd

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks