Overview

overview

10

Static

static

3

2024-04-18...LL.dll

windows7-x64

1

2024-04-18...LL.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-18-SSLoad-DLL.dll

  • Size

    1.8MB

  • Sample

    240619-wye2bswbpb

  • MD5

    ca303668b5420c022ef9c78ce1f2bfb7

  • SHA1

    959a727b907b395aec2b05e5892e2bf78cb5544b

  • SHA256

    73774861d946d62c2105fef4718683796cb77de7ed42edaec7affcee5eb0a0ee

  • SHA512

    a550f4f0487b0467ebf8827fa336c57368fe9debb68cda0b8b3f486d5189a5bbe1ed4c42ae4a6effc60dd6f5f65c6fef6e7ea9592aef2c121f9babc252c37c4d

  • SSDEEP

    49152:XasPOtjnq0Fx47oxpxuZZFIGkTagevclh:XasPUjnqKIodcZYeTvclh

Score
10/10
ssloadloader

Malware Config

Targets

    • Target

      2024-04-18-SSLoad-DLL.dll

    • Size

      1.8MB

    • MD5

      ca303668b5420c022ef9c78ce1f2bfb7

    • SHA1

      959a727b907b395aec2b05e5892e2bf78cb5544b

    • SHA256

      73774861d946d62c2105fef4718683796cb77de7ed42edaec7affcee5eb0a0ee

    • SHA512

      a550f4f0487b0467ebf8827fa336c57368fe9debb68cda0b8b3f486d5189a5bbe1ed4c42ae4a6effc60dd6f5f65c6fef6e7ea9592aef2c121f9babc252c37c4d

    • SSDEEP

      49152:XasPOtjnq0Fx47oxpxuZZFIGkTagevclh:XasPUjnqKIodcZYeTvclh

    Score
    10/10
    ssloadloader

    • SSLoad

      SSLoad Unpacked DLL payload.

      loaderssload

    • Detects SSLoad Unpacked payload

      loader

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Persistence

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks