Overview

overview

7

Static

static

7

Temp Spoofer.zip

windows7-x64

1

Temp Spoofer.zip

windows10-2004-x64

1

Temp Spoof...er.bat

windows7-x64

1

Temp Spoof...er.bat

windows10-2004-x64

1

Temp Spoof...on.pdf

windows7-x64

3

Temp Spoof...on.pdf

windows10-2004-x64

3

Temp Spoof...ent.7z

windows7-x64

3

Temp Spoof...ent.7z

windows10-2004-x64

3

client.exe

windows7-x64

1

client.exe

windows10-2004-x64

1

Temp Spoof...ol.rar

windows7-x64

3

Temp Spoof...ol.rar

windows10-2004-x64

3

dControl/dControl.exe

windows7-x64

7

dControl/dControl.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

dControl/dControl.ini

windows7-x64

1

dControl/dControl.ini

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Temp Spoofer.zip

  • Size

    12.7MB

  • Sample

    240920-lew6dszapf

  • MD5

    2bbd93d13f7091e1711a498fff112aab

  • SHA1

    5a2877611f534edaa196c057757546e4d01b8049

  • SHA256

    9ec0d034052df060d26c172ca0cf8d26f252dc2f7faf09a700ccf9a871485dc5

  • SHA512

    5062a8b7976ad25fab74649ea426040b3e627fb233ebdf0c6cb1af51cf65b1c86b30a68b3107a78268a62c3e60fe616773ebbe1601dcfd8a50510104542849ee

  • SSDEEP

    393216:lhlXi+bnoaDEPEiftDlxa+r+md5Bjv9Ic3w:l7XVR+EUlZ+md5Bjv9Icg

Score
7/10
discoverylinkpdfupx

Malware Config

Targets

    • Target

      Temp Spoofer.zip

    • Size

      12.7MB

    • MD5

      2bbd93d13f7091e1711a498fff112aab

    • SHA1

      5a2877611f534edaa196c057757546e4d01b8049

    • SHA256

      9ec0d034052df060d26c172ca0cf8d26f252dc2f7faf09a700ccf9a871485dc5

    • SHA512

      5062a8b7976ad25fab74649ea426040b3e627fb233ebdf0c6cb1af51cf65b1c86b30a68b3107a78268a62c3e60fe616773ebbe1601dcfd8a50510104542849ee

    • SSDEEP

      393216:lhlXi+bnoaDEPEiftDlxa+r+md5Bjv9Ic3w:l7XVR+EUlZ+md5Bjv9Icg

    Score
    1/10
    behavioral1behavioral2

    • Target

      Temp Spoofer/Checker.bat

    • Size

      1KB

    • MD5

      08fb4451ab72d4402f0e59c01a818b80

    • SHA1

      01710b42e2ed57fa36ba99a2d4fbbf172fca1e69

    • SHA256

      75c8fd9956c04d97d837172afcd0960aaede7d803725665430e189065caf3215

    • SHA512

      3fe67c40b945ae20db5dae4db621a41844e4b70f44cd131a0dd1c06750e4451ff019b9f9262acbd5bafefc1f1ba8db33a65db1177aebab55570a30d992ee4273

    Score
    1/10
    behavioral3behavioral4

    • Target

      Temp Spoofer/Temp Spoofer Instruction.pdf

    • Size

      56KB

    • MD5

      c5de0e69118d9c42a607c1f522a6d5e7

    • SHA1

      facda6392bde8c76f6123b944343adaa949e189f

    • SHA256

      60173e95c0a0bcbc6084e3453a6e8898ab23e9efda7fd30c5eec9874b41d1dc2

    • SHA512

      58bd985d98dbd55715ba859d952ec89c9665d404af832c4e2ba812e33c7dafa23bd9450d844491010554bf4e45ffe28660ee00d575ad1b071263955c7d0289fe

    • SSDEEP

      1536:sCVWGndgCZmNMd8xTjxJhzhOrnWA+jsWpdVS8di:frd9Q/FxJhz3AQsCdVSui

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      Temp Spoofer/client.7z

    • Size

      12.2MB

    • MD5

      3fbcec19b305d4f5c6d873a25ced93fe

    • SHA1

      da20aef8180132c3ccc9d25a8ab65f7b330881af

    • SHA256

      d63869617852c5be06064fd50525eb5d819e96e977a191fd189a2ec98b628cf3

    • SHA512

      850131ca6932844b940a287ae62421e00f754daafed06ca2c78b443ac393f2a405fde4e920690b6e70d61886e33c07291f49583212b52ce6223b8e477a3d2606

    • SSDEEP

      393216:ghlXi+bnoaDEPEiftDlxa+r+md5Bjv9Ic3v:g7XVR+EUlZ+md5Bjv9Icf

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      client.exe

    • Size

      13.4MB

    • MD5

      de247adc0271250cf88eaecc025870e9

    • SHA1

      fadf9362cea140f5cd77ea7056f728117f85aab9

    • SHA256

      31d35a385663b70a2579fc86116c29a30f2606a46f72e16a03b4ae249974e266

    • SHA512

      26b92a895dbca90a393acd0200c870d1c1ee017dd1591be88d86ec0c0421a8e02f70fb17847fb55bf1f6eb48714b68199c4fe288eeddd87146dc697d82b26440

    • SSDEEP

      196608:vfbrUJU+ss0fhcfaUh8rCg9wE2HFqp+TwftnFkLIcDjs7aNbHO/bL/JPDOLCthvW:nbcUBxanmrCFEaPwftFkUcDjIzLRfPz

    Score
    1/10
    behavioral10behavioral9

    • Target

      Temp Spoofer/dControl.rar

    • Size

      444KB

    • MD5

      428cb83b2e15f0778b8c2b6690e76cf0

    • SHA1

      ed00f69608856e297589fad5378135428d61e936

    • SHA256

      9ec1d5deb844be83c6383e4253ef7457d3546805ff5121dd05dc830c39a2a3ea

    • SHA512

      e37de3f7b239833fbc9fd50ab6379516f44f18d0d9a6f0d06d86552de37341f6c542b7e1682f775a5f3ab4ff756db243b9e7b5964b5e13df5aa171ff98cbd9da

    • SSDEEP

      12288:fa1rJ2lDFDHy/tauCEehMHQAD1c5XlbXPVFB:ytJgDZS/t6WQA1c5VbX3B

    Score
    3/10
    behavioral11behavioral12

    • Target

      dControl/dControl.exe

    • Size

      447KB

    • MD5

      58008524a6473bdf86c1040a9a9e39c3

    • SHA1

      cb704d2e8df80fd3500a5b817966dc262d80ddb8

    • SHA256

      1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326

    • SHA512

      8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31

    • SSDEEP

      6144:Vzv+kSn74iCmfianQGDM3OXTWRDy9GYQDUmJFXIXHrsUBnBTF8JJCYrYNsQJzfgu:Vzcn7EanlQiWtYhmJFSwUBLcQZfgiD

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral13behavioral14

    • Target

      out.upx

    • Size

      653KB

    • MD5

      6970ea0b6597dcd5b4f5f19f28e958a8

    • SHA1

      a0130bb7ac03ec4799c90781ca93fd1392c6d54c

    • SHA256

      481e03978ca339ce697252895efe89b09fefd3098ad247d24eeb6cca9969f553

    • SHA512

      bc95cbe9a050e3d3b713745ef399bf2817d38f8e019f6edffdd2bf755badbde766e434e39a7f32356125bba0692b694c18da8dd0762aac0c9430d45acb215e01

    • SSDEEP

      12288:nkxDoouVA2nxKkhEvdRgQriDJOIlW+yBGQowlNCWS:RRmJkioQrilOIc+yMx

    Score
    1/10
    behavioral15behavioral16

    • Target

      dControl/dControl.ini

    • Size

      84KB

    • MD5

      9d7877fb1a8598fbbd0fbcff03f728ab

    • SHA1

      7648cb7af5d28b5195c6e3400a5954a86204d00a

    • SHA256

      a8924e978cf203578cbd497adf6e3dce8dcd573a6e962c711bce8d7db9d9214e

    • SHA512

      6e1d762cc51d5dac0a22c1e84ba861c221034ea5b72fbf0dc41334f7134f300cf9f29a6713445fd7853413f2a8235232e2f18cabcb90b4abdbf14951e027fc46

    • SSDEEP

      768:i/G+NmPssxaxdk2aqexodULxEQq1wIgC+AEbSr6:1+NFsxkKdqJdULgbWSO

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks