Overview

overview

10

Static

static

3

d66b8f8031...45.dll

windows7-x64

10

d66b8f8031...45.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45

  • Size

    427KB

  • Sample

    240908-vmqs1sxdpn

  • MD5

    caafc14c58b60dfd934e3d97a8c47a9f

  • SHA1

    28206ed6fea207130704d5b3e0c30c08d22a8ec7

  • SHA256

    d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45

  • SHA512

    a9948315b28c15ab4c7753539a0025b353f945a31f82c662f2d93701121cf9b9e3d9e87dfd77259db07bc859daa6f12157bff5c99047e7134e096c252c5d0b73

  • SSDEEP

    1536:1dT/bOBvnXzyTn25XZKz6ctkzIph3wessmPr1if/959M8Rx4WA:1Fid7AzKJessmk959l/

Score
10/10
golddragonbackdoordiscovery

Malware Config

Targets

    • Target

      d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45

    • Size

      427KB

    • MD5

      caafc14c58b60dfd934e3d97a8c47a9f

    • SHA1

      28206ed6fea207130704d5b3e0c30c08d22a8ec7

    • SHA256

      d66b8f803154c7f7e58aed5507b4bd11fd3e9e8f2550e4eda1b995849c7a8e45

    • SHA512

      a9948315b28c15ab4c7753539a0025b353f945a31f82c662f2d93701121cf9b9e3d9e87dfd77259db07bc859daa6f12157bff5c99047e7134e096c252c5d0b73

    • SSDEEP

      1536:1dT/bOBvnXzyTn25XZKz6ctkzIph3wessmPr1if/959M8Rx4WA:1Fid7AzKJessmk959l/

    Score
    10/10
    golddragonbackdoordiscovery

    • GoldDragon

      GoldDragon is a second-stage backdoor attributed to Kimsuky.

      backdoorgolddragon

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks