Resubmissions

11/07/2024, 13:46

240711-q21vbayepl 9

11/07/2024, 13:45

240711-q2qpca1drh 9

General

  • Target

    x86

  • Size

    79KB

  • Sample

    240711-q21vbayepl

  • MD5

    23ee5a8b998de681eb94885abdb35dd6

  • SHA1

    b666bad55d0f0b1feff26e4fdef60db6ef67ed12

  • SHA256

    c0ae1eb249705f61d45ca747c91c02a411557a28792f4064c1d647abb580bc10

  • SHA512

    dfce08f4e0a5f2c2f20adfbeaae923cf4c9136437beb8a0f7ee1fd6d9e1ebad13247a8781cf40ba165369cdb4335d38d34abf3746047c4a0422348be991bbb11

  • SSDEEP

    1536:WinNLc8aos4+7bPEjpO7CxW2XJMeAvNebSIYLwyV8Q0HOn:dNSoscjpO7DMAFnbMDQ0Y

Score
9/10

Malware Config

Targets

    • Target

      x86

    • Size

      79KB

    • MD5

      23ee5a8b998de681eb94885abdb35dd6

    • SHA1

      b666bad55d0f0b1feff26e4fdef60db6ef67ed12

    • SHA256

      c0ae1eb249705f61d45ca747c91c02a411557a28792f4064c1d647abb580bc10

    • SHA512

      dfce08f4e0a5f2c2f20adfbeaae923cf4c9136437beb8a0f7ee1fd6d9e1ebad13247a8781cf40ba165369cdb4335d38d34abf3746047c4a0422348be991bbb11

    • SSDEEP

      1536:WinNLc8aos4+7bPEjpO7CxW2XJMeAvNebSIYLwyV8Q0HOn:dNSoscjpO7DMAFnbMDQ0Y

    Score
    9/10
    • Contacts a large (5920) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks