General

  • Target

    92818711cabc57082132fef15e19cd80N.exe

  • Size

    1.7MB

  • Sample

    240816-tgp4vsxcmq

  • MD5

    92818711cabc57082132fef15e19cd80

  • SHA1

    2392930ec8f146e67c35e9986c30cacf986039fb

  • SHA256

    ee6ce911c56a3e8d47bb627932d7fc7d19e31415ec07ebb32c31e71b15101c3d

  • SHA512

    1f65cc65f2d2fb566de0c361d12b0b449f7da7c8ef0250747eb61653065172d7014f8265f913c04eaad11f81da113b4ff608f30519b274358c21966e06ca63cb

  • SSDEEP

    24576:Etb20pkfCqT5TBWgNQ7aWS6aWTtVXVChV1SzCaJWN7W6A8:tCg5tQ7aCbTvEhVgGaJ8q58

Malware Config

Targets

    • Target

      92818711cabc57082132fef15e19cd80N.exe

    • Size

      1.7MB

    • MD5

      92818711cabc57082132fef15e19cd80

    • SHA1

      2392930ec8f146e67c35e9986c30cacf986039fb

    • SHA256

      ee6ce911c56a3e8d47bb627932d7fc7d19e31415ec07ebb32c31e71b15101c3d

    • SHA512

      1f65cc65f2d2fb566de0c361d12b0b449f7da7c8ef0250747eb61653065172d7014f8265f913c04eaad11f81da113b4ff608f30519b274358c21966e06ca63cb

    • SSDEEP

      24576:Etb20pkfCqT5TBWgNQ7aWS6aWTtVXVChV1SzCaJWN7W6A8:tCg5tQ7aCbTvEhVgGaJ8q58

    • NanoCore

      NanoCore is a remote access tool (RAT) with a variety of capabilities.

    • Drops startup file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks