Resubmissions

02/08/2024, 12:16

240802-pfv69s1drg10

02/08/2024, 12:15

240802-pe6ava1dra10

02/08/2024, 12:14

240802-pefp7a1dqh10

02/08/2024, 12:06

240802-n97ays1dpa10

01/08/2024, 01:57

240801-cdsl5szgma10

General

  • Target
    bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf.zip
  • Size 20.2MB
  • Sample240802-pe6ava1dra
  • SHA256 bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • stealc

Botnet
  • hello

C2
  • http://85.28.47.70

Attributes
  • url_path

    /570d5d5e8678366c.php

Extracted

Family
  • xworm

C2
  • schools-copper.gl.at.ply.gg:14154

Attributes
  • Install_directory

    %Userprofile%

  • install_file

    svchost.exe

  • telegram

    https://api.telegram.org/bot6887301557:AAE2e7AcjyzPeaHQb_2XBthrT3TTCKt7jCs/sendMessage?chat_id=7045481276

Extracted

Family
  • redline

Botnet
  • 6951125327

C2
  • https://t.me/+7Lir0e4Gw381MDhi

  • https://steamcommunity.com/profiles/76561199038841443

Extracted

Family
  • asyncrat

Version
  • 0.5.7B

Botnet
  • Default

C2
  • 82.65.19.134:4443

Mutex
  • AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target
      bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf.zip
    • Size 20.2MB
    • SHA256 bfc092b384976e97153bae0e29359461bfd65fce5ad8188d6460de57bc680eaf
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe
    • Size 678KB
    • SHA256 0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe
    • Size 1.3MB
    • SHA256 0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe
    • Size 161KB
    • SHA256 08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe
    • Size 389KB
    • SHA256 0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe
    • Size 146KB
    • SHA256 0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f.exe
    • Size 1.0MB
    • SHA256 25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe
    • Size 338KB
    • SHA256 2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e.exe
    • Size 338KB
    • SHA256 2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe
    • Size 3.3MB
    • SHA256 39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    • Target
      1/3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe
    • Size 487KB
    • SHA256 3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks

static1

hello6951125327ratdefaultstealclockbitxwormredlineasyncrat
Score
10/10

behavioral1

Score
1/10

behavioral2

Score
1/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10