General

  • Target

    Dox tool.py

  • Size

    50KB

  • Sample

    240723-pzgg8atbnh

  • MD5

    9763797cf9f0b3ae2574e492bcfb41ef

  • SHA1

    4bf2fcbacbbf5b7198b12aab732329934d8fd99b

  • SHA256

    9ee452fe03eaac2a9c7240622dd129d5c91b33982387fb41882a30b3175131d7

  • SHA512

    8a851ca7e7249e85e56559f64ec1cf269a8841d9ca6196599a08086b709a0c07a1d3d2a0e7980f31e796a3359a7e3497287ad18ac7ea4d28c72b5bdb6e239b07

  • SSDEEP

    768:17jV6fU5MxF3DhoOxgFrBIDrzZKPste0hCE01X4wr1t/EXCIQ7ipmSvmWO:1l6fU5YF3DhoOgQzZK90pG7i4gVO

Score
6/10

Malware Config

Targets

    • Target

      Dox tool.py

    • Size

      50KB

    • MD5

      9763797cf9f0b3ae2574e492bcfb41ef

    • SHA1

      4bf2fcbacbbf5b7198b12aab732329934d8fd99b

    • SHA256

      9ee452fe03eaac2a9c7240622dd129d5c91b33982387fb41882a30b3175131d7

    • SHA512

      8a851ca7e7249e85e56559f64ec1cf269a8841d9ca6196599a08086b709a0c07a1d3d2a0e7980f31e796a3359a7e3497287ad18ac7ea4d28c72b5bdb6e239b07

    • SSDEEP

      768:17jV6fU5MxF3DhoOxgFrBIDrzZKPste0hCE01X4wr1t/EXCIQ7ipmSvmWO:1l6fU5YF3DhoOgQzZK90pG7i4gVO

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks