General

  • Target

    gs-auto-clicker-4-0.exe

  • Size

    850KB

  • Sample

    240817-a8z9csxfja

  • MD5

    e42d679a626463742b553794dea6f62b

  • SHA1

    789c25a360342fd431dccbf01b831c36aa229317

  • SHA256

    e4a3b0ce536c0996082311077ac65a096d9e6bbf404c6e6a155ecefb32e864c5

  • SHA512

    9ff1ea63334ab8dc3b81edfd572c0e1a7483ac6912255c839aafbba88e0aa19334c2810966384f7998af697dcb9e4ee502cec276a11108c2f0f9510e2aa67279

  • SSDEEP

    12288:0aWzgMg7v3qnCi0ErQohh0F42CJ8lnypQDaGEohvRyPJ1+Fxe:raHMv6CorjSnypQDaG9u1We

Score
6/10

Malware Config

Targets

    • Target

      gs-auto-clicker-4-0.exe

    • Size

      850KB

    • MD5

      e42d679a626463742b553794dea6f62b

    • SHA1

      789c25a360342fd431dccbf01b831c36aa229317

    • SHA256

      e4a3b0ce536c0996082311077ac65a096d9e6bbf404c6e6a155ecefb32e864c5

    • SHA512

      9ff1ea63334ab8dc3b81edfd572c0e1a7483ac6912255c839aafbba88e0aa19334c2810966384f7998af697dcb9e4ee502cec276a11108c2f0f9510e2aa67279

    • SSDEEP

      12288:0aWzgMg7v3qnCi0ErQohh0F42CJ8lnypQDaGEohvRyPJ1+Fxe:raHMv6CorjSnypQDaG9u1We

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks