Overview

overview

7

Static

static

3

ericx sef/toolbot.exe

windows7-x64

7

ericx sef/toolbot.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    wetransfer_ericx-sef_2024-09-07_1850.zip

  • Size

    82.5MB

  • Sample

    240907-246n5ashpd

  • MD5

    bcd086783ac39d959ed3e538836b35c4

  • SHA1

    f6eaaa707c3d97eccf46424029934a71b0f957c0

  • SHA256

    2b46246b77cc81208f045b0ec933f889c273e1c0d3d0af4ba94bd9c821bdde47

  • SHA512

    8939612672733c0d659725176946d745359c962ae296e872254cee2be899a33e193faeb0c38d6e0ad97053c42e09ce2a25a7163719e51850632938c003076da1

  • SSDEEP

    1572864:iEnUSsE/ehnUtzYSU3lyhIiWHWkUHmjQtbCmBbOnSR13pyAAXyDuz4H10YAY:uSsE/ehUtUrNWkk5gqbT5yANuz4VZAY

Score
7/10
defense_evasion

Malware Config

Targets

    • Target

      ericx sef/toolbot.exe

    • Size

      82.5MB

    • MD5

      a3439271f6de235c7d368d3c698ada9b

    • SHA1

      5ce0b86e04d5957501399234b56efc102c737a31

    • SHA256

      770051640cb59d368e625c0b1d6b1e66ec93454e3185902ee2d66f1253617503

    • SHA512

      2b992add3c53d7860d9fc536f926d4322b8802c8989fa37a2ba20bc9cfa6c6a6ba305f92f8f55d557b3fc60329eefbc9bd8f401fe9b99f3ddd465b2de20bb925

    • SSDEEP

      1572864:/EnUSsE/ehnUtzYSU3lyhIiWHWkUHmjQtbCmBbOnSR13pyAAXyDuz4H10YA:fSsE/ehUtUrNWkk5gqbT5yANuz4VZA

    Score
    7/10
    defense_evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks