Overview

overview

6

Static

static

3

Resources/image.jpg

windows7-x64

3

Resources/image.jpg

windows10-2004-x64

3

Setup.exe

windows7-x64

1

Setup.exe

windows10-2004-x64

6

Resubmissions

11/06/2024, 17:49

240611-webvkavgld 6

11/06/2024, 17:49

240611-wd1gjavgke 3

11/06/2024, 17:48

240611-wdly5svgjd 3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Robonix.zip

  • Size

    4.1MB

  • Sample

    240611-webvkavgld

  • MD5

    caacfa5690a27aadea750f49dbab0fcd

  • SHA1

    9ed8048fb5a6589bc724dd1f86802733b7494ec4

  • SHA256

    fd21f825b69d9baa1efed2e7e7685033424ed263d12bba2bfc53a69de4496f87

  • SHA512

    2a15afe5eec26d6d3f489a57b92a6f0aabe2aacb8e6febad224b152b7367e8c2ad3cfb3b61df190b9982c1f19f45c1bf7a76741853eafc47e9275c67f31c2bd1

  • SSDEEP

    98304:TK+Ba7hAUMipmEvqW+xUr6sw+X7LgR+NsCcVmlpNhsJy08NxrRle:Na7h3dxvj+xCd7LgR+NxcIlnMy08Nxl0

Score
6/10
execution

Malware Config

Targets

    • Target

      Resources/image.jpg

    • Size

      42KB

    • MD5

      b6a22825139d4446d58ef40338c2256a

    • SHA1

      31fabaa25556a99567dc3aeb57e7ba59bf4e289f

    • SHA256

      940477daf6143fac1a07632fc9de83e85ebf3998186b484db95018f1db792065

    • SHA512

      7ca145f8f3c2d9c22fa9fb053173daec1bc59c14708deec08bb62cd4a0c6b8e1fd7de5d55751e9c9f1b52359daca6042034cdd0fbeec417bb6363de6b94550c2

    • SSDEEP

      768:BGqR9D+lU096JnErzdsTaH2O0GcphfKIAh2kXy67yD:EqnD+lx6Jn4zyTot0lphkXy67yD

    Score
    3/10
    behavioral1behavioral2

    • Target

      Setup.exe

    • Size

      7.2MB

    • MD5

      9e8c94cc94438d26db584f5dc4963b96

    • SHA1

      0d94785e36150a43036f08808bd0b71a6eeb0179

    • SHA256

      08f32ec58af0731b37869dcb191ca58bbb0b62159f851af900e35cb2b524ce0d

    • SHA512

      bb5a72170a4c088c6f1a0874d2957d1d164e6050db4110d598b3fcc4b8cb8a23143d77b9a78c85ea87b94cc27e158d851d22cd960b9610851a0af8671520cb5a

    • SSDEEP

      98304:Z6Q0Rya9E+sf4wEz6b2PV8yxGuIUVXJacbH67r9e6q05L:ZIya9El4JzsyxhIU1gcb2RNJB

    Score
    6/10
    execution

    • Legitimate hosting services abused for malware hosting/C2

    • Command and Scripting Interpreter: PowerShell

      Start PowerShell.

      execution
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks