General

  • Target

    nanoMIDIPlayer.zip

  • Size

    38.0MB

  • Sample

    241017-xfgmwazbre

  • MD5

    1b6e7bbee2ae08ad60d0e68633d0a3e9

  • SHA1

    a0cf256265c07e1c2d1ff79ea1878b4d77898bce

  • SHA256

    7a8081547f0865aa0c4689b56755457c379ff45d2016852dceb096c8f076fef1

  • SHA512

    ee39befc1ed7a22d2fd6baffbe3b03fbc159bd08def7ebfbb2b438572764fffe14d94efa566337d4291eefc0274411d7ba7735fea81039eb643554779e0d63a4

  • SSDEEP

    786432:o1O5sIPzdPamCM2Oi+BB+zpSg9BHf0Y3wbP170vgy:xsIL1qM2OvB+zca/0Y3wTtKgy

Malware Config

Targets

    • Target

      nanoMIDIPlayer.exe

    • Size

      38.4MB

    • MD5

      901f7eaa52db35bd550cc57110d04ff3

    • SHA1

      3ca068f7f4a688ce6c55866d740d78e09a64b566

    • SHA256

      cb5a0e9c3701233e1006dd14019fa242ece4a37e2dbdf92a9cab39064ec118bd

    • SHA512

      30adc5491b6e15915113d4ea7738657b79a5cb39742126bbb911650851ebc566a5c8f2ef4b3f78ca4f8b233afc62d7eeca15ea6d9468590b589eb2c96869d963

    • SSDEEP

      786432:UAjeQts+MgPQy0XQEWy+nUU0sc6yEUcDhQfW8p2El5FIi4e:CQtW8QXQJysOX6yEpVKWA2GnJ4e

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Target

      nanoMIDIPlayer.pyc

    • Size

      260KB

    • MD5

      79695e069463963418d4a76e15d8cb32

    • SHA1

      75e1dc69d1bc043b316c275dc9377f4fc6aaeb54

    • SHA256

      74a0909b0685ede9c77bd3184de199f2ff9dc19d82af6784d49099467745a23d

    • SHA512

      4e2037ca5933148c32af3d9cca8b78800efe66c9286d40cbd44ff36fe643730895b2e07fd852e8e3ba9375878dd437b636e922eee341c2ce0e05eab86a5dc9b6

    • SSDEEP

      6144:SFy4AQ1kubyH+14SvJMgvptZqOPk/uIKEYoV:S0TIyHMFvTDGK5i

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks