Resubmissions

28-05-2024 11:02

240528-m5c1wagd7x 10

06-05-2024 13:53

240506-q6ywhsde4z 3

General

  • Target

    ah.zip

  • Size

    7.0MB

  • Sample

    240528-m5c1wagd7x

  • MD5

    777c025958c2dd332ae1163092305f54

  • SHA1

    ec016614bbbe6e88dc4e58e26a9d88bf4d1a3a64

  • SHA256

    36a00c545e5fdbd5712eb468099a211dccf17812a0cb08efde9d3ddce7181c5e

  • SHA512

    7ab95cde168fa9e866d7841729cfd4a51b3b1406cf1c808271297f7875309541fec7e0d5d7f7e0a76c7b5e0ce5e795321dfcb729208283ecd311dc0563bb920f

  • SSDEEP

    196608:Z8oDmWKq7cLCueSB4lE71V/YxQtw44B2yZIgrgI:6n+SWW2Otw4hyuWH

Score
10/10

Malware Config

Targets

    • Target

      ah.zip

    • Size

      7.0MB

    • MD5

      777c025958c2dd332ae1163092305f54

    • SHA1

      ec016614bbbe6e88dc4e58e26a9d88bf4d1a3a64

    • SHA256

      36a00c545e5fdbd5712eb468099a211dccf17812a0cb08efde9d3ddce7181c5e

    • SHA512

      7ab95cde168fa9e866d7841729cfd4a51b3b1406cf1c808271297f7875309541fec7e0d5d7f7e0a76c7b5e0ce5e795321dfcb729208283ecd311dc0563bb920f

    • SSDEEP

      196608:Z8oDmWKq7cLCueSB4lE71V/YxQtw44B2yZIgrgI:6n+SWW2Otw4hyuWH

    Score
    10/10
    • NetSupport

      NetSupport is a remote access tool sold as a legitimate system administration software.

    • Target

      ForceCPU.exe

    • Size

      19KB

    • MD5

      b982a103b0d4e0db856026a163124bf3

    • SHA1

      40772be00068bbd394ff0fccd551151a822f3e70

    • SHA256

      2d209c2b823e350c1f1661f87a3a013804302477afe56877f94adbafe7a2e06d

    • SHA512

      214ecdf348e2093e91a489c0541f05eb3356e2531c1840a99d9f727caf1130f5041ccbc6356a7bc31fb4dece927d3fee2fa9e4689d2badbe680fd40104a9d327

    • SSDEEP

      192:fHtIemmfltxD5WLtWwiyT5hNGnYe+PjPxucwwyibSucwwQJk35H0JOqxEV1a//bG:xD5WLZ5qnYPLxoDfoDg+JNY1cAhhv

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks