General

  • Target

    cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741.zip

  • Size

    481KB

  • Sample

    240608-jqd3vaac6t

  • MD5

    cf853ba5808b795bed3b7fc2ba55274f

  • SHA1

    d669abbff493925068e637b999cb28cfbc2181a0

  • SHA256

    cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741

  • SHA512

    33e621a67af9d89580e71e995024bb9b37a7b8c0e0d305c3cc46f957613599d8f85771655767bc97559f1330ba45e4fb6570fb49502627cb14e19955025a0771

  • SSDEEP

    12288:OhlGrKeQSPEIBrX01FURb5hvdCqBFkMNi29Kc4:OrGrlzL0M9QEi2Y

Malware Config

Targets

    • Target

      cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741.zip

    • Size

      481KB

    • MD5

      cf853ba5808b795bed3b7fc2ba55274f

    • SHA1

      d669abbff493925068e637b999cb28cfbc2181a0

    • SHA256

      cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741

    • SHA512

      33e621a67af9d89580e71e995024bb9b37a7b8c0e0d305c3cc46f957613599d8f85771655767bc97559f1330ba45e4fb6570fb49502627cb14e19955025a0771

    • SSDEEP

      12288:OhlGrKeQSPEIBrX01FURb5hvdCqBFkMNi29Kc4:OrGrlzL0M9QEi2Y

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

    • Drops startup file

    • Loads dropped DLL

    • Modifies file permissions

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks