General

  • Target

    Silver rat.zip

  • Size

    11.9MB

  • Sample

    240927-cv42hazhjq

  • MD5

    baec6977a8452efc5bcbcea14115c7e5

  • SHA1

    889acede3911e11300c82ca29d18e31b8890812b

  • SHA256

    c444972837ee88f56982e0e32bd83b232241aca94e2b7a76c0c53d17441ae31c

  • SHA512

    fd0106572e699eaf03534f8f598d181101f4370eec563185b80f8fdefc1c542d30921b424f08352dfacc3f13538a487800be24be014de8aa350d2f2b534cae53

  • SSDEEP

    196608:8ghnE8KpqNxem7dE/LcPGn1W687TK7KWh6a3Dbrms/yU9vSt1Uaje5e:8gRwYPVEjeu1W6V7K2h3HNQgajv

Score
7/10

Malware Config

Targets

    • Target

      Silver rat/ndp48-web.exe

    • Size

      1.4MB

    • MD5

      34a5c76979563918b953e66e0d39c7ef

    • SHA1

      4181398aa1fd5190155ac3a388434e5f7ea0b667

    • SHA256

      0bba3094588c4bfec301939985222a20b340bf03431563dec8b2b4478b06fffa

    • SHA512

      642721c60d52051c7f3434d8710fe3406a7cfe10b2b39e90ea847719ed1697d7c614f2df44ad50412b1df8c98dd78fdc57ca1d047d28c81ac158092e5fb18040

    • SSDEEP

      24576:xGHL3siy910NSmtLvUDSRbm4Jah1rVx8MjoGO8W6cbZtgd6AmpITsz0+lLF7cy:mL3s7K8eTUDBzrVx8MjoGO8W6cbs8NpT

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Enterprise v15

Tasks