Overview

overview

10

Static

static

10

anarchy.zip

windows7-x64

1

anarchy.zip

windows10-2004-x64

1

New folder...el.exe

windows7-x64

10

New folder...el.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    anarchy.zip

  • Size

    55.2MB

  • Sample

    240814-da98fszfmk

  • MD5

    271f1a3401bced80cc319ae243f56718

  • SHA1

    aaff7edf2716fd9009fdac0317c9fb8ebb32193a

  • SHA256

    17af0185fa72ac61299e9dca019656d7e5458f1d9a3c2b01e9a98147a948c833

  • SHA512

    22985ce6191aaded1abaeec20d62a968d1e37feec68d15cedcd66d0555ef7d5daa012cb925f58a436964b6c97ffce3bf197e18d8f6f4c04301794486013c5e0c

  • SSDEEP

    1572864:hVj0AfiLevILCt9ECPo6Uj4nIl1CfhNwL:hVj3wev7t9ECPoRj1lGM

Score
10/10
asyncratstealeriumstormkittydiscoveryrat

Malware Config

Targets

    • Target

      anarchy.zip

    • Size

      55.2MB

    • MD5

      271f1a3401bced80cc319ae243f56718

    • SHA1

      aaff7edf2716fd9009fdac0317c9fb8ebb32193a

    • SHA256

      17af0185fa72ac61299e9dca019656d7e5458f1d9a3c2b01e9a98147a948c833

    • SHA512

      22985ce6191aaded1abaeec20d62a968d1e37feec68d15cedcd66d0555ef7d5daa012cb925f58a436964b6c97ffce3bf197e18d8f6f4c04301794486013c5e0c

    • SSDEEP

      1572864:hVj0AfiLevILCt9ECPo6Uj4nIl1CfhNwL:hVj3wev7t9ECPoRj1lGM

    Score
    1/10
    behavioral1behavioral2

    • Target

      New folder/Anarchy Panel.exe

    • Size

      54.6MB

    • MD5

      94bac1a0cc0dbac256f0d3b4c90648c2

    • SHA1

      4abcb8a31881e88322f6a37cbb24a14a80c6eef2

    • SHA256

      50c2dba1d961e09cb8df397b71bd3b6a32d0ee6dbe886e7309305dc4ba968f94

    • SHA512

      30ecee38d5d641abaf73e09a23c614cb3b8b84aa1f8ff1818e92c1f2b51bf6841d3e51564aecb5efd01a3d98db88f0938e7dd4ee9c74ca5477785c33c969ffd9

    • SSDEEP

      786432:RvcKHU1yll1EcgYwm/7hPo9b9DMs2PTUpRYj:lPU4bZwm/NwEIYj

    Score
    10/10
    asyncratdiscoveryrat

    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

      ratasyncrat

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Loads dropped DLL

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks