Overview

overview

10

Static

static

1

New Text Document.txt

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New Text Document.txt

  • Size

    28B

  • Sample

    241013-mzfvkssfqe

  • MD5

    326011309dec4336e1dac605ff5aaef4

  • SHA1

    fcd41df8b3311a161dd04b0114913985c92d4bfa

  • SHA256

    dd9e3c06246ef0c285d3b180b9000b365392a94cc0f6ae09ed8016d994624735

  • SHA512

    bf27f40217a1bd8480433741886af274a8ebf8afb28a5cc2745fc6497771528e094be513c9eac9dd961524e569f9173b62d38856b4275acfc0c192c9e94fbc7a

Score
10/10
888ratdefense_evasiondiscoveryinfostealerrattrojanupx

Malware Config

Targets

    • Target

      New Text Document.txt

    • Size

      28B

    • MD5

      326011309dec4336e1dac605ff5aaef4

    • SHA1

      fcd41df8b3311a161dd04b0114913985c92d4bfa

    • SHA256

      dd9e3c06246ef0c285d3b180b9000b365392a94cc0f6ae09ed8016d994624735

    • SHA512

      bf27f40217a1bd8480433741886af274a8ebf8afb28a5cc2745fc6497771528e094be513c9eac9dd961524e569f9173b62d38856b4275acfc0c192c9e94fbc7a

    Score
    10/10
    888ratdefense_evasiondiscoveryinfostealerrattrojanupx

    • 888RAT

      888RAT is an Android remote administration tool.

      trojaninfostealerrat888rat

    • Android 888 RAT payload

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks