Resubmissions

07/10/2024, 13:50

241007-q5h4nsscka8

07/10/2024, 13:47

241007-q3lf1syapl8

General

  • Target
    DragonX V2.html
  • Size 21.1MB
  • Sample241007-q5h4nsscka
  • SHA256 dfaea87c4e831f2da15ca5614d0bc8f6fc33b12f4320abe1759c70a379659d26
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      DragonX V2.html
    • Size 21.1MB
    • SHA256 dfaea87c4e831f2da15ca5614d0bc8f6fc33b12f4320abe1759c70a379659d26
    • MD5 SHA1 SHA512 SSDEEP
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

    • Detected potential entity reuse from brand STEAM.

MITRE ATT&CK Enterprise v15

Tasks