Resubmissions

17-08-2024 07:31

240817-jcj2yatgng 10

17-08-2024 07:27

240817-h99hesxdjl 10

17-08-2024 07:22

240817-h7jh8atenf 10

General

  • Target

    Private server 4.8 (Emilia).exe

  • Size

    17.7MB

  • Sample

    240817-h99hesxdjl

  • MD5

    72c00f23fb5421eb8bb7a1843597675d

  • SHA1

    8ccea1f496be5cec0c0da4e1c5d7a2bf01f38f86

  • SHA256

    ba834fb6411121af7cc759a200f0cdf8c4be4b53d710bc7a285939e9210c7d27

  • SHA512

    d01162b5f018e05ef1c7772be7644f2ce46b9448a52004e8c9afcbf10029a13b1177167cabc868b05b17ca674bc9e90430d91b217de72ec259c7c14a1dd3d41f

  • SSDEEP

    393216:WqPnLFXlrWQ8DOETgsvfG9g5RXvEcTujKqNRq:7PLFXNWQhECqyvuR

Malware Config

Targets

    • Target

      Private server 4.8 (Emilia).exe

    • Size

      17.7MB

    • MD5

      72c00f23fb5421eb8bb7a1843597675d

    • SHA1

      8ccea1f496be5cec0c0da4e1c5d7a2bf01f38f86

    • SHA256

      ba834fb6411121af7cc759a200f0cdf8c4be4b53d710bc7a285939e9210c7d27

    • SHA512

      d01162b5f018e05ef1c7772be7644f2ce46b9448a52004e8c9afcbf10029a13b1177167cabc868b05b17ca674bc9e90430d91b217de72ec259c7c14a1dd3d41f

    • SSDEEP

      393216:WqPnLFXlrWQ8DOETgsvfG9g5RXvEcTujKqNRq:7PLFXNWQhECqyvuR

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target

      main.pyc

    • Size

      7KB

    • MD5

      257d73c98b9a85af45606074b228a398

    • SHA1

      5aee715305de8f3ca50180b5461879c148b0cf52

    • SHA256

      5c968da7a3cbefcec84c5ff24f9baca5dbac8e814fb27ddbbdef6605304765b4

    • SHA512

      3a8e363c1ef4c9b5e5f7b1b6eece46dccee90bbca3e1f197b070a8eef829ee376403da8aaf9da6f9e5dcb9a12f423a561ed6a7f02e28988d35ab4b75aa2e43cb

    • SSDEEP

      192:wEahb81DD80kWdXwRY61qHhQBFJhwx5xMdwVnw:ibO6WuRHEBQBv2x5xPVw

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks