Resubmissions

22-08-2024 15:33

240822-sy6bqsvbng 7

10-03-2024 16:21

240310-ttpc4aga89 10

10-03-2024 12:34

240310-prvpwacf93 10

General

  • Target

    file

  • Size

    2.4MB

  • Sample

    240822-sy6bqsvbng

  • MD5

    b11c3fad2e48022f58635df7368d6441

  • SHA1

    63883fee892ac1e0d44f568913931c0d59b343d1

  • SHA256

    2a362d6d3bceaf1159bc245499a778f1ab9c229c3cbd4be4c63a582a716a4c80

  • SHA512

    6c68523b259c307e1c4ff4c6809fb20e5d9d9998a32d03ca06eaf29ec8f27bcaca2cafd9b57420b307160b3ebfeac16d234b99f6119f8f3038f4b5bf4b169023

  • SSDEEP

    49152:jCqqfqaaK++EFUw2PsQMIZnLzn8FGaqxMBeVBBzKl:jONGXqGY1y

Score
7/10

Malware Config

Targets

    • Target

      file

    • Size

      2.4MB

    • MD5

      b11c3fad2e48022f58635df7368d6441

    • SHA1

      63883fee892ac1e0d44f568913931c0d59b343d1

    • SHA256

      2a362d6d3bceaf1159bc245499a778f1ab9c229c3cbd4be4c63a582a716a4c80

    • SHA512

      6c68523b259c307e1c4ff4c6809fb20e5d9d9998a32d03ca06eaf29ec8f27bcaca2cafd9b57420b307160b3ebfeac16d234b99f6119f8f3038f4b5bf4b169023

    • SSDEEP

      49152:jCqqfqaaK++EFUw2PsQMIZnLzn8FGaqxMBeVBBzKl:jONGXqGY1y

    Score
    7/10
    • Drops startup file

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks