General

  • Target

    idk.exe

  • Size

    34.2MB

  • Sample

    240814-xgzj3sxhrc

  • MD5

    25fc564ab1e9c47caf1c21d5e7b2cf91

  • SHA1

    cec136b3071e3b62f115839dc998b348db5c8fee

  • SHA256

    2292ff743d56d7dfbfcf9e0c187739615f0d943010e59b9c0cecc95b541a2bf3

  • SHA512

    156a45745ab481dea11d5c41174a39f3c4fc0190874619a4000447112665f7b794f6d44039be40ba2d09f5d4d8a51576f48bbb67b007049caab4c8918e6a3318

  • SSDEEP

    786432:iRp1g9UHsBy8oaxgDUukWXOJJhYivSnP5SAWsjxe/MnaB:UTgFooLuV+JJhYi6nEAWscMnaB

Score
7/10

Malware Config

Targets

    • Target

      idk.exe

    • Size

      34.2MB

    • MD5

      25fc564ab1e9c47caf1c21d5e7b2cf91

    • SHA1

      cec136b3071e3b62f115839dc998b348db5c8fee

    • SHA256

      2292ff743d56d7dfbfcf9e0c187739615f0d943010e59b9c0cecc95b541a2bf3

    • SHA512

      156a45745ab481dea11d5c41174a39f3c4fc0190874619a4000447112665f7b794f6d44039be40ba2d09f5d4d8a51576f48bbb67b007049caab4c8918e6a3318

    • SSDEEP

      786432:iRp1g9UHsBy8oaxgDUukWXOJJhYivSnP5SAWsjxe/MnaB:UTgFooLuV+JJhYi6nEAWscMnaB

    Score
    7/10
    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks