Overview

overview

7

Static

static

3

SPAM_PAM.exe

windows7-x64

7

SPAM_PAM.exe

windows10-2004-x64

7

SPAM_PAM.pyc

windows7-x64

3

SPAM_PAM.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SPAM_PAM.exe

  • Size

    43.8MB

  • Sample

    240528-zwnr8sdd64

  • MD5

    922645d54b773656cdf368d460e6f2d6

  • SHA1

    db6e0d8b55f9dabb98e466dd4c3de3b59e95e41c

  • SHA256

    a0d95cd64333e5aee1f2f62311981f1ee82860ac5a356968c9e3dcee1f89babd

  • SHA512

    68adf36e469f4647553447bd7a2b773c397d4350387551915122d54eac6432bf6535fbb9732dba2b2dcd2ddfd12d98d95a264bfab6e91c0ed2a7fa7363e6f257

  • SSDEEP

    786432:JVKFQpYynt5CojeVRKMMncuNWmH7u89GGADPKQvJfTmtjvWDteWQRU0GQo92:zKuWynt5RjeVRKMMncuNWeucEKQNTnDU

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      SPAM_PAM.exe

    • Size

      43.8MB

    • MD5

      922645d54b773656cdf368d460e6f2d6

    • SHA1

      db6e0d8b55f9dabb98e466dd4c3de3b59e95e41c

    • SHA256

      a0d95cd64333e5aee1f2f62311981f1ee82860ac5a356968c9e3dcee1f89babd

    • SHA512

      68adf36e469f4647553447bd7a2b773c397d4350387551915122d54eac6432bf6535fbb9732dba2b2dcd2ddfd12d98d95a264bfab6e91c0ed2a7fa7363e6f257

    • SSDEEP

      786432:JVKFQpYynt5CojeVRKMMncuNWmH7u89GGADPKQvJfTmtjvWDteWQRU0GQo92:zKuWynt5RjeVRKMMncuNWeucEKQNTnDU

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      SPAM_PAM.pyc

    • Size

      1KB

    • MD5

      04742bcd1fff2fbd80f4e5ca93e69fd7

    • SHA1

      b133fc77eb5011bdfe672a17fc94403ab14721ed

    • SHA256

      f8082f22af936a3ef21d7e376262e1c92fb70ca121b999bf97781820cd275c4a

    • SHA512

      2f9ca257fc0420ff83018141f8ff69b94285254bbd694f9e67103dc2f1ecb17333ea07545c8a34635f5cfef459f0d33d941055ff43c3d943a3cbfd89707d22f8

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks