Resubmissions

29/09/2024, 10:22

240929-md8y8stbnf 8

29/09/2024, 10:21

240929-mdt53stbmb 1

29/09/2024, 10:05

240929-l4hdjasfkb 6

General

  • Target

    roblox.1920x1080.mp4

  • Size

    23.2MB

  • Sample

    240929-md8y8stbnf

  • MD5

    e777d42032c0546428ce9b9b0d508a23

  • SHA1

    25b7d966d0ceb16821e1ae5c2618695aa0f80a9c

  • SHA256

    73373c5efde59d20c279e122081f255e44f2f2cf52960592b520296eccb930c3

  • SHA512

    4263b9a4d454d7941b20d0d2a3cce263a763ad49ba8a1ca2ce571ef1151302b9328ed3618d55bf1073b10da1385f1eba6b6c6d537e394ec3f430bf323a485dd5

  • SSDEEP

    393216:+vxCFsyqBUgesGyEFV08NSuAk8uxqfHTaf43CsPPNyXx24EQ3SUKe/OzsdkBtQyQ:+vxCFtqgsqFS8vqfHTaQSsdIwQfew0zm

Malware Config

Targets

    • Target

      roblox.1920x1080.mp4

    • Size

      23.2MB

    • MD5

      e777d42032c0546428ce9b9b0d508a23

    • SHA1

      25b7d966d0ceb16821e1ae5c2618695aa0f80a9c

    • SHA256

      73373c5efde59d20c279e122081f255e44f2f2cf52960592b520296eccb930c3

    • SHA512

      4263b9a4d454d7941b20d0d2a3cce263a763ad49ba8a1ca2ce571ef1151302b9328ed3618d55bf1073b10da1385f1eba6b6c6d537e394ec3f430bf323a485dd5

    • SSDEEP

      393216:+vxCFsyqBUgesGyEFV08NSuAk8uxqfHTaf43CsPPNyXx24EQ3SUKe/OzsdkBtQyQ:+vxCFtqgsqFS8vqfHTaQSsdIwQfew0zm

    Score
    8/10
    • Path Permission

      Adversaries may modify directory permissions/attributes to evade access control lists (ACLs) and access protected files.

    • Gatekeeper Bypass

      Adversaries may modify file attributes and subvert Gatekeeper functionality to evade user prompts and execute untrusted programs. Gatekeeper is a set of technologies that act as layer of Apples security model to ensure only trusted applications are executed on a host.

    • File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer) may leave traces to indicate to what was done within a network and how. Removal of these files can occur.

MITRE ATT&CK Enterprise v15

Tasks