Overview

overview

6

Static

static

1

sample.js

windows11-21h2-x64

6

sample.js

ubuntu-18.04-amd64

3

sample.js

debian-9-armhf

4

sample.js

debian-9-mips

4

sample.js

debian-9-mipsel

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    sample

  • Size

    81KB

  • Sample

    240807-qpx8nayhmp

  • MD5

    45b9b6492a48e7a50b27263a7f8f803e

  • SHA1

    c684ab34ded78889be0bc892a6978472a0bbda2b

  • SHA256

    00fd61759745000a577f73154049c966db362cc5d08701ef1421232d29aacb29

  • SHA512

    f8030956ff5d738a64c89b2e212be87353893d15ae79ef163d8d33378d554209331bae37c7ba1a7ef9e0dd0f5ed98990b96c46a94f454b7a4aaca75f48804635

  • SSDEEP

    1536:O6QJFLCSwNiervlQehNFZuSuWtWWxaRkejWXaE3qpKjcS+N/6apcGksAG6ZJsnf4:pQJFLxwnlMRkejWXaE3qpKjcS+N/6ap+

Score
6/10
antivmdiscoveryexecutionlinux

Malware Config

Targets

    • Target

      sample

    • Size

      81KB

    • MD5

      45b9b6492a48e7a50b27263a7f8f803e

    • SHA1

      c684ab34ded78889be0bc892a6978472a0bbda2b

    • SHA256

      00fd61759745000a577f73154049c966db362cc5d08701ef1421232d29aacb29

    • SHA512

      f8030956ff5d738a64c89b2e212be87353893d15ae79ef163d8d33378d554209331bae37c7ba1a7ef9e0dd0f5ed98990b96c46a94f454b7a4aaca75f48804635

    • SSDEEP

      1536:O6QJFLCSwNiervlQehNFZuSuWtWWxaRkejWXaE3qpKjcS+N/6apcGksAG6ZJsnf4:pQJFLxwnlMRkejWXaE3qpKjcS+N/6ap+

    Score
    6/10
    discoveryexecutionantivm

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks