General

  • Target

    Javlonbek Bobojonov.zip

  • Size

    1.6MB

  • Sample

    240807-n56tma1hqg

  • MD5

    fb32224dbc800d7785f8c2fa58fa98c6

  • SHA1

    5d6fef9c9fd2b9cf7ba0c90d0faaa28860240b2f

  • SHA256

    50c289fd59ad42d53dfa95ea13a5aa42a6116d655b2956636737a5816ed55b0b

  • SHA512

    480e16f6c27c85a23fd7afa6c0791434d2abc945946fa815f481d4c3275315caa5f57e44dc52f1d82a7179bcccae0d8b3b502b2bede30c87ecefb7ed1d4c40fe

  • SSDEEP

    49152:ixzZ7+QPldlI/1ngJRzO5NXoppf3mV0m38sivlAkf:ixzFlbItniRzgNXoDeD38ZNAkf

Malware Config

Targets

    • Target

      Javlonbek Bobojonov.zip

    • Size

      1.6MB

    • MD5

      fb32224dbc800d7785f8c2fa58fa98c6

    • SHA1

      5d6fef9c9fd2b9cf7ba0c90d0faaa28860240b2f

    • SHA256

      50c289fd59ad42d53dfa95ea13a5aa42a6116d655b2956636737a5816ed55b0b

    • SHA512

      480e16f6c27c85a23fd7afa6c0791434d2abc945946fa815f481d4c3275315caa5f57e44dc52f1d82a7179bcccae0d8b3b502b2bede30c87ecefb7ed1d4c40fe

    • SSDEEP

      49152:ixzZ7+QPldlI/1ngJRzO5NXoppf3mV0m38sivlAkf:ixzFlbItniRzgNXoDeD38ZNAkf

    Score
    1/10
    • Target

      javlonbek_bobojonov_cci_com_uz\Documents\Документы из старого компьютера\D Диск\1\Для перевода аудита GAO\PROMT 4U\Patch PROMT 9.exe

    • Size

      1.6MB

    • MD5

      5c56d38b2ed1bf274b956819ae22ac20

    • SHA1

      69cc3ae68be863506a75ae6a5ae1a1b2c83aa7bc

    • SHA256

      128289f6ed00489dd2285af8432b69124324ccfbdb2d98d67e0b71040d1605ad

    • SHA512

      2bcb54d6c0b13cc161d4895b8d25f7ac78a33c00e0b01c39325aceb023dd0542298e24de0f2c08901eeb87851796316b387a36fabe791dfff672388f28982ddd

    • SSDEEP

      49152:7VePJGQlzFTi9Z7XMZLzOBNXW1hJ3kVimFOqinPc:7VyzpifXiLzCNXW/ehFOnPc

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks