Overview

overview

8

Static

static

1

DragonX V2.html

windows10-2004-x64

3

DragonX V2.html

windows11-21h2-x64

8

Resubmissions

07-10-2024 13:50

241007-q5h4nsscka 8

07-10-2024 13:47

241007-q3lf1syapl 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DragonX V2.html

  • Size

    21.1MB

  • Sample

    241007-q5h4nsscka

  • MD5

    e2142065d50ace4b455f43bf6a2b19bc

  • SHA1

    6f53f210f51e653940697a93800c011d380fdc51

  • SHA256

    dfaea87c4e831f2da15ca5614d0bc8f6fc33b12f4320abe1759c70a379659d26

  • SHA512

    0a56c579b05c7df9992b2a4c2eebd1b03109f88b9165f748a62e200a72be9bf9f1290bfcae63f26f33e215d7cc21d561243f7e5fa05aae835cd36816e551e4e2

  • SSDEEP

    49152:Y2mfVNHUMXfIsid0R5RVfczl4IhLCd/zQAunpQ8XcirGIVv/CHu4LB1SnJMyePuN:6Zfczl4Iud1k

Score
8/10
steamdefense_evasiondiscoverymotwpersistencephishing

Malware Config

Targets

    • Target

      DragonX V2.html

    • Size

      21.1MB

    • MD5

      e2142065d50ace4b455f43bf6a2b19bc

    • SHA1

      6f53f210f51e653940697a93800c011d380fdc51

    • SHA256

      dfaea87c4e831f2da15ca5614d0bc8f6fc33b12f4320abe1759c70a379659d26

    • SHA512

      0a56c579b05c7df9992b2a4c2eebd1b03109f88b9165f748a62e200a72be9bf9f1290bfcae63f26f33e215d7cc21d561243f7e5fa05aae835cd36816e551e4e2

    • SSDEEP

      49152:Y2mfVNHUMXfIsid0R5RVfczl4IhLCd/zQAunpQ8XcirGIVv/CHu4LB1SnJMyePuN:6Zfczl4Iud1k

    Score
    8/10
    discoverysteamdefense_evasionmotwpersistencephishing

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw

    • Detected potential entity reuse from brand STEAM.

      phishingsteam
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks