Overview

overview

5

Static

static

3

mpclient.dll

windows7-x64

5

mpclient.dll

windows10-2004-x64

5

mpclient.exe

windows7-x64

5

mpclient.exe

windows10-2004-x64

5

Resubmissions

10-10-2024 16:44

241010-t82a7s1dmq 7

10-10-2024 16:43

241010-t8bqjs1djp 5

10-10-2024 16:30

241010-tz1nbazhmp 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ray.zip

  • Size

    752KB

  • Sample

    241010-t8bqjs1djp

  • MD5

    8a7a6ac2fedd86f4509a5c93cfdd3edd

  • SHA1

    fa8c2e8e21d12d3fff90a8d76558e679b7192592

  • SHA256

    8cdf678bed1558ca64a6788519e28f727a5ee75b808051530c1a2f0d9c974301

  • SHA512

    95f8e6aa66c412f0d958f36523ed3394d9de30f8e7f0ff79c89405bc073a4c747b6c52e19f57606f7e9523fd5ef3403c4115d8a5dba25cd5137b612d03e9163b

  • SSDEEP

    12288:DDocdeg/IyQKcKjEZm/vOyHbfI01uXtR/Wk2XxyCPVsCI/p3Jb5fwCe6TFdocw5i:DDomexZobvQ/l2Xx5fI/9rvBvXwYhP

Score
5/10
upx

Malware Config

Targets

    • Target

      mpclient.dll

    • Size

      1.4MB

    • MD5

      bc36ad620120c9375365f86c9827da49

    • SHA1

      aa22ff23ed7979fcd50f1d3a376b3dbfa11d5ca9

    • SHA256

      a41871976043cc13331b6f04abbaff2ae0071c672c31fe8f5be6bf3f40ccfbe6

    • SHA512

      b536526c5af0e8b3652b20e374d8f5606a9b6d78e7583bc8bb01a6ada43137247343e44732b96bc344783f3f698f85256ea27e7390b020a6913f77bf5c3fcef2

    • SSDEEP

      24576:mQOyCpf+0vA3a2J5NGCxJZSZ2YfGsUoIcNGcixWrJeepdr:mQOyCpf+052HNGCxJZSZ+zxHC

    Score
    5/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      mpclient.exe

    • Size

      186KB

    • MD5

      6bd4d7f68924301051c22e8a951aecba

    • SHA1

      2ae2a6b863616b61ccb550fc1a145ae025896de1

    • SHA256

      9afd12eede0db98a35aba52f53041efa4a2f2a03673672c7ac530830b7152392

    • SHA512

      ebf97dcc36413e9c05da1df9d296bd5226f2c5acc86f8592755f10454328ffa90dc9805825ede64f350fade5de9cef73d050aad569b733f914da6aa92740f708

    • SSDEEP

      3072:crWzrkggF1yGunZZwFrUhxDR1cAoPF+sq:uCzgF1enfwFrUk

    Score
    5/10
    upx

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks