General

  • Target

    ed04284a5e57127a9069e236dbe1a17b1670ba5779b295a76a2e17f6b95edb79

  • Size

    1.5MB

  • Sample

    240928-dd6pfawbre

  • MD5

    f90ea5be21b33bab524789f7503b96e3

  • SHA1

    0f97387ab6dda0227d3de3eb4b4bfacf3533380d

  • SHA256

    ed04284a5e57127a9069e236dbe1a17b1670ba5779b295a76a2e17f6b95edb79

  • SHA512

    8d69df2cec6e1c38e826c84fcb19aad5bc17dcd83a3947586f699d5820493012ac649f98875e20acb1595a966fafb32831a986b919a8e99c493d75b1c399e6ba

  • SSDEEP

    24576:7MfywgIt/65Fu99573/aiVIOYrFzpCM5hyv3m8AMtRyce0LvOK0B:l49ry

Malware Config

Targets

    • Target

      ed04284a5e57127a9069e236dbe1a17b1670ba5779b295a76a2e17f6b95edb79

    • Size

      1.5MB

    • MD5

      f90ea5be21b33bab524789f7503b96e3

    • SHA1

      0f97387ab6dda0227d3de3eb4b4bfacf3533380d

    • SHA256

      ed04284a5e57127a9069e236dbe1a17b1670ba5779b295a76a2e17f6b95edb79

    • SHA512

      8d69df2cec6e1c38e826c84fcb19aad5bc17dcd83a3947586f699d5820493012ac649f98875e20acb1595a966fafb32831a986b919a8e99c493d75b1c399e6ba

    • SSDEEP

      24576:7MfywgIt/65Fu99573/aiVIOYrFzpCM5hyv3m8AMtRyce0LvOK0B:l49ry

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

    • Gh0st RAT payload

    • Gh0strat

      Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks