Overview

overview

7

Static

static

3

machiavelli.exe

windows10-1703-x64

7

$PLUGINSDI...em.dll

windows10-1703-x64

$PLUGINSDI...ns.exe

windows10-1703-x64

$PLUGINSDI...us.exe

windows10-1703-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    machiavelli.exe

  • Size

    241KB

  • Sample

    240526-zeccwacc44

  • MD5

    ed65ef16c57acf49bc3081de217f273d

  • SHA1

    b55febf2ad667065b81080c9aefc57d0457a1815

  • SHA256

    aa338c2b803632cfc90226b4d86ca0b28384ad9dcd745b2bf8ca6b6344584896

  • SHA512

    de59fb736647ef6214aa84e66c7bf65a0a0985f155dcb000da552173114cbadaa7159524199ad0770776a498a6c3f1167c3680d12506808a1bce4f31b617e211

  • SSDEEP

    6144:jfL+oq5k4preR+O/LE11c7ojuZUvyejrRp:jfLCkfM11GojuHefRp

Score
7/10

Malware Config

Targets

    • Target

      machiavelli.exe

    • Size

      241KB

    • MD5

      ed65ef16c57acf49bc3081de217f273d

    • SHA1

      b55febf2ad667065b81080c9aefc57d0457a1815

    • SHA256

      aa338c2b803632cfc90226b4d86ca0b28384ad9dcd745b2bf8ca6b6344584896

    • SHA512

      de59fb736647ef6214aa84e66c7bf65a0a0985f155dcb000da552173114cbadaa7159524199ad0770776a498a6c3f1167c3680d12506808a1bce4f31b617e211

    • SSDEEP

      6144:jfL+oq5k4preR+O/LE11c7ojuZUvyejrRp:jfLCkfM11GojuHefRp

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      4add245d4ba34b04f213409bfe504c07

    • SHA1

      ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

    • SHA256

      9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

    • SHA512

      1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

    • SSDEEP

      192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr

    Score
    3/10
    behavioral2

    • Target

      $PLUGINSDIR/deteriorations.exe

    • Size

      189KB

    • MD5

      9101a7f1e09281d413ece6d825020d92

    • SHA1

      9df34287601a77e65cec58843474108dd0309f54

    • SHA256

      781c6b118a97dd0301788d1882b18242d2768ad40752cb622f70e80d7e3a0a88

    • SHA512

      8f3e5068f47817593ddd3eeb48848a1a49ffbb62fbc935c3d90757625ab3aec2e19f34d45b583dbe39dbd5cad11e00e0eb888dda6ffa9952b0851d0ada616425

    • SSDEEP

      3072:/yvdEMS0aobANsyqm1NDpLilsHF8kxdbJfrSheFvIbE7NPN8+OKDN:WdU3sMNNRfbJfrSheFmVKN

    Score
    1/10
    behavioral3

    • Target

      $PLUGINSDIR/surplus.exe

    • Size

      139KB

    • MD5

      fda656c75b581d0dce6537d159052bcd

    • SHA1

      a06523896f54e51a1a7269356634cc0bbb069edd

    • SHA256

      4ce66c1b06bab37a85a93c5e7d7c9ba6f79da608fab33a00c44b8b0a9443309d

    • SHA512

      8e7928c0e0439da880b7f2b036aa4f89cabb365bfe83c17184336580101c96d3b1f2c2ddc254a99a73d7cd0e203c40a1b22f68ad803070d2537c82fb95718106

    • SSDEEP

      3072:zs5j0FMPXJKD4va+Rr3LkR8NjQwnSSxAdw0OJfrSheFvIbE7NPNGv6iBDQlU:I5j02Pk8a+R80EwhnJfrSheFgiCQq

    Score
    1/10
    behavioral4

MITRE ATT&CK Enterprise v15

Tasks