Resubmissions

29/06/2024, 20:44

240629-zjdrhayhqr 8

29/06/2024, 20:07

240629-yv62ravdmd 6

29/06/2024, 20:06

240629-yvrbasybqq 4

General

  • Target

    pixil-frame-0 (2).png

  • Size

    5KB

  • Sample

    240629-zjdrhayhqr

  • MD5

    cec0707d5c1ab1beb6b2e22f210d3460

  • SHA1

    b1d909aa2d094a6cb75ce923634a6d1a6c189d35

  • SHA256

    540caab575ba3985205fc8df1d03742f091840e228a46ad5caad1feb6c26d739

  • SHA512

    2ca64b640dae93ef1f799f008355cdc3362fba77c4564f84431c150c5a4fcddd96ef2c93e89d92858129c3670a4426cf6573cf89cc7fe8d1aa55bbf2be59efd9

  • SSDEEP

    96:j5KmSlLOAuZsTGJGQxPTf3yF1UxdtcI9qxssdQ8690dnRu1:ImSNOAOsTkGQBfyF1aRqx8ARw

Malware Config

Targets

    • Target

      pixil-frame-0 (2).png

    • Size

      5KB

    • MD5

      cec0707d5c1ab1beb6b2e22f210d3460

    • SHA1

      b1d909aa2d094a6cb75ce923634a6d1a6c189d35

    • SHA256

      540caab575ba3985205fc8df1d03742f091840e228a46ad5caad1feb6c26d739

    • SHA512

      2ca64b640dae93ef1f799f008355cdc3362fba77c4564f84431c150c5a4fcddd96ef2c93e89d92858129c3670a4426cf6573cf89cc7fe8d1aa55bbf2be59efd9

    • SSDEEP

      96:j5KmSlLOAuZsTGJGQxPTf3yF1UxdtcI9qxssdQ8690dnRu1:ImSNOAOsTkGQBfyF1aRqx8ARw

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks