General

  • Target

    Saveinstance.exe

  • Size

    20.6MB

  • Sample

    240823-fpmf2swglc

  • MD5

    851eccc817b37d6770c77e56b7c77b69

  • SHA1

    aac970af3e34f95787b2e3bbe04e3d606c07359b

  • SHA256

    13943da6b0e14ea48cd42418990b0623f373d051b27d12f56e373901f0a02176

  • SHA512

    c177b845abf3ae8fc4df279b283b3a40cc3bc3d824620153b209d7b1ceb40ecd039501ae14e403e9aab5497ae224ab71369a84b21de24b53e57578bc454f110d

  • SSDEEP

    393216:xqPnLFXlrfh2Jp5qC3njkVQ8DOETgsvfGgKgQWPvE4+MRaMTxm:YPLFXNfh50sQhEQhP8pg

Malware Config

Targets

    • Target

      Saveinstance.exe

    • Size

      20.6MB

    • MD5

      851eccc817b37d6770c77e56b7c77b69

    • SHA1

      aac970af3e34f95787b2e3bbe04e3d606c07359b

    • SHA256

      13943da6b0e14ea48cd42418990b0623f373d051b27d12f56e373901f0a02176

    • SHA512

      c177b845abf3ae8fc4df279b283b3a40cc3bc3d824620153b209d7b1ceb40ecd039501ae14e403e9aab5497ae224ab71369a84b21de24b53e57578bc454f110d

    • SSDEEP

      393216:xqPnLFXlrfh2Jp5qC3njkVQ8DOETgsvfGgKgQWPvE4+MRaMTxm:YPLFXNfh50sQhEQhP8pg

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      main.pyc

    • Size

      7KB

    • MD5

      302d7e06b79318c15b55fc3157540d76

    • SHA1

      3628ee40e6ff5c00b9a76084894e0121495d3757

    • SHA256

      64bb81807d09e576778c5842d70cbd7affd7e923cbb4e833c38bba265c7e60dc

    • SHA512

      b14f931229a5720199d2ab4f873ebd13990fbcf792537f3c88356c0ddf60d24bcd4dd61be926c30971303f59741d55747f66bf1ce9e58bb9e5e6c28a8c4d749c

    • SSDEEP

      192:wLqWD8FGWdXwpqk4xInmziJhwj5Mdwnjnw:QWuoinT2j5Pnjw

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks