General

  • Target

    x86.crdownload

  • Size

    55KB

  • Sample

    240801-zsc7bswemq

  • MD5

    2854ce31f13b9c1f256c2028b3c9965a

  • SHA1

    33b1d8726207063e4eee68df454e4e4c9a32e6f3

  • SHA256

    8a0e3eaf08b0344b0224ee78d51947f8ce0af2937b60d10eee0a7f4d59b392f4

  • SHA512

    df3903e30ad78576703e3d5e5ba16e23ffcad09ddb39b2e5f1fdd357559ae9dc1d038d29071a782781992d907c56d565e65306183a138eb3bbf11c4c485d7631

  • SSDEEP

    768:XEMDsW5ArB0PQ+e86KvjQ5dIZALzkbdbyOaUulWMQs6xR334urC:ZDskK+Q+e86KvjiKYzoyOaUYWM1m3rC

Score
9/10

Malware Config

Targets

    • Target

      x86.crdownload

    • Size

      55KB

    • MD5

      2854ce31f13b9c1f256c2028b3c9965a

    • SHA1

      33b1d8726207063e4eee68df454e4e4c9a32e6f3

    • SHA256

      8a0e3eaf08b0344b0224ee78d51947f8ce0af2937b60d10eee0a7f4d59b392f4

    • SHA512

      df3903e30ad78576703e3d5e5ba16e23ffcad09ddb39b2e5f1fdd357559ae9dc1d038d29071a782781992d907c56d565e65306183a138eb3bbf11c4c485d7631

    • SSDEEP

      768:XEMDsW5ArB0PQ+e86KvjQ5dIZALzkbdbyOaUulWMQs6xR334urC:ZDskK+Q+e86KvjiKYzoyOaUYWM1m3rC

    Score
    9/10
    • Contacts a large (23822) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks