Overview

overview

8

Static

static

3

GitExecutor.exe

windows10-2004-x64

8

opengl32.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Project.rar

  • Size

    5.5MB

  • Sample

    240710-my1hlatdlq

  • MD5

    341089d686ba0c7c55895e5e0bfa30e2

  • SHA1

    5b0624fa41a7e7aa0b3b5fc3c1ae2435950c302e

  • SHA256

    7733fb7c086ca1a922e6c6701fc15aff79b068da97e51c2f3e4480353e4ccff5

  • SHA512

    490f4efe06a9fe3c3d4c100b69431145175c1608323a23eee22a1714116c9a08b7eb0bc5e9dd9cc9a9571358ba4ede70a047733a5b2b264a7a98550a03d25092

  • SSDEEP

    98304:l6bQCoaAkZkGbJ26haW9W1mA6++B15rWmUPMrLrRYAKYtJDYTPHUuNe/pwCI:l6XlZkeJ7I67B+K9TUPM/uANn0Pc/pwr

Score
8/10
execution

Malware Config

Targets

    • Target

      GitExecutor.exe

    • Size

      42.6MB

    • MD5

      5f1669361965a1da568bb65ec440ec0d

    • SHA1

      71c436a31fddf280713b79f028637fd3da8d82c9

    • SHA256

      90232c5cef01e92c62d35c15f0f23cff5b77c3e72a01f338d682f00b6c806009

    • SHA512

      c4ee6873704b14030cddcd8893d007b23c9ef521553cb83c2af04ee17ae167131405a691de8df1ae5cfbca05e4e5af8c3c5f9a9d5c9a1e9ee159b7cff6e31b59

    • SSDEEP

      98304:PfCv+rScGQYPDofAKB1RYQpHd5nKRQGEaTmR3vNUkqh76n7EnVFG8TzIhX724Lkk:P7EsfAeHY0x7nbT9UsMaN6m

    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1

    • Target

      opengl32.dll

    • Size

      104KB

    • MD5

      476b6a340b1d1de81f96c42cb94824a3

    • SHA1

      ec0fda158e52f2c15d50ac559839262511396370

    • SHA256

      c640ca6961bb3f90ee17ee2eab9b3ab66c76d0437408cde00bbcca58f8ccf0c7

    • SHA512

      1df3ff41f1eab4267acf180aea00095d429190b00bbd65cbeeafe2ebd8fe964a4963709b9dd725a8aff963dcc1174295397ebcc11b0f19c08988855ab78f5790

    • SSDEEP

      48:/44444444444444444444444444444444444444444444444444444444444444j:H

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks