General

  • Target

    af58e6c3f42bd7e6d35f4830f5d56f1dc87e642cf2889647cbe0399d888f6e56

  • Size

    337KB

  • Sample

    240817-ed27payepp

  • MD5

    6e488d51c84eef54c9d34f6468dc3aa7

  • SHA1

    3b32e687d46030ff4b8886cc642e7a23342de0b2

  • SHA256

    af58e6c3f42bd7e6d35f4830f5d56f1dc87e642cf2889647cbe0399d888f6e56

  • SHA512

    b975435a3121c29370863b6cf47ceff4d503e3b7974e1671a00af16fa9100258417e0cfa5621e409dcefe933e58b6016ddf463b3de30844c5052eacce45eecf9

  • SSDEEP

    3072:gAgbM3b5GcgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:GE5Gc1+fIyG5jZkCwi8r

Malware Config

Targets

    • Target

      af58e6c3f42bd7e6d35f4830f5d56f1dc87e642cf2889647cbe0399d888f6e56

    • Size

      337KB

    • MD5

      6e488d51c84eef54c9d34f6468dc3aa7

    • SHA1

      3b32e687d46030ff4b8886cc642e7a23342de0b2

    • SHA256

      af58e6c3f42bd7e6d35f4830f5d56f1dc87e642cf2889647cbe0399d888f6e56

    • SHA512

      b975435a3121c29370863b6cf47ceff4d503e3b7974e1671a00af16fa9100258417e0cfa5621e409dcefe933e58b6016ddf463b3de30844c5052eacce45eecf9

    • SSDEEP

      3072:gAgbM3b5GcgYfc0DV+1BIyLK5jZWlfXXqyYwi8x4Yfc09:GE5Gc1+fIyG5jZkCwi8r

    • Adds autorun key to be loaded by Explorer.exe on startup

    • njRAT/Bladabindi

      Widely used RAT written in .NET.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks