Resubmissions
23-07-2024 00:00
240723-aatnxswglp 722-07-2024 23:36
240722-3l3p7avhql 722-07-2024 23:36
240722-3lyfgavbrg 722-07-2024 23:36
240722-3llrnsvbra 722-07-2024 23:35
240722-3k79aavhkp 722-07-2024 23:32
240722-3jjvasvbja 722-07-2024 23:30
240722-3hda5avamb 722-07-2024 23:28
240722-3ggl6athrb 722-07-2024 23:16
240722-29kzlstere 7General
-
Target
Lofy_Cloner__Casa_Cloner (2).exe
-
Size
8.3MB
-
Sample
240722-3jjvasvbja
-
MD5
66e6140ba9e19c29529dceb265b17b41
-
SHA1
fefdb348596c3160bac45888d56e6e940a452907
-
SHA256
bded5cf8faf4c7ff8a7582538cd325da029adcae50b14f38ed4dc6adabc5673b
-
SHA512
b0a26c3d34e1f1043e06ca759d645d10c7b1ab6f05a1d5e1788714b0d568c27f2763450f2af608cf01c7947dc7f55cc403dfa3355d51c45227f2951e4d5a6944
-
SSDEEP
196608:GJi56vBAoiL2Vmd6+DNnNgwQ+dtLZ7k30szjad0tNNlezM:GIL2Vmd6mZNjd7NszjJle
Malware Config
Targets
-
-
Target
Lofy_Cloner__Casa_Cloner (2).exe
-
Size
8.3MB
-
MD5
66e6140ba9e19c29529dceb265b17b41
-
SHA1
fefdb348596c3160bac45888d56e6e940a452907
-
SHA256
bded5cf8faf4c7ff8a7582538cd325da029adcae50b14f38ed4dc6adabc5673b
-
SHA512
b0a26c3d34e1f1043e06ca759d645d10c7b1ab6f05a1d5e1788714b0d568c27f2763450f2af608cf01c7947dc7f55cc403dfa3355d51c45227f2951e4d5a6944
-
SSDEEP
196608:GJi56vBAoiL2Vmd6+DNnNgwQ+dtLZ7k30szjad0tNNlezM:GIL2Vmd6mZNjd7NszjJle
Score7/10-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
-
-
Target
main.pyc
-
Size
4KB
-
MD5
b248370c84e395334b5db2c23a31a406
-
SHA1
d724fd76f738e45295dd0ec67dd494364c6560fc
-
SHA256
71504675c785aed3d14ceb0ec19ac736e1d663a60a2be3a10fb7e3a483884acc
-
SHA512
03b4ca392cb07a7f615eed7a322ee913a1d74e4be33525d8158bd6a615019569fa48f40b6140f4990ec2bb385c90ceb5bc88dff9fd8bd53df9685eb82fb576fd
-
SSDEEP
96:zRAapvy2IqrvrtUHnPCf0KiqnPb4Rv6qvPrQZMWTwfLRPoOYua:N7HvrtU2Z6vxv8Zp0fVPozua
Score3/10 -