General

  • Target

    MissouriValleyLogos-All_2SecondaryRight.png

  • Size

    291KB

  • Sample

    241020-dklylsvgmf

  • MD5

    4171d31460578d8f287e24136593278c

  • SHA1

    fcc7188493a1e454e5eeaaafa9e1eab28c79a074

  • SHA256

    a816db90d3d47c5a0b6feabc7b8358330b32b39b221028ff046c8526d5cbd1d8

  • SHA512

    b82ed2226ab6467aa2c77efe237c01903fe5ff01e0cce801ed83fd69a510b15c30dd8793c06056f1c90b55db5ad00c1772a55ec19fc8a93b8cb53cd7b1d15c0f

  • SSDEEP

    6144:k0oGsQJE0N+3yDWwOCF4ePL1J2pdRWft6Iq7aMReqhxCs:kSs+f+3oWDFYvzft6Iq7aMEqhxCs

Malware Config

Targets

    • Target

      MissouriValleyLogos-All_2SecondaryRight.png

    • Size

      291KB

    • MD5

      4171d31460578d8f287e24136593278c

    • SHA1

      fcc7188493a1e454e5eeaaafa9e1eab28c79a074

    • SHA256

      a816db90d3d47c5a0b6feabc7b8358330b32b39b221028ff046c8526d5cbd1d8

    • SHA512

      b82ed2226ab6467aa2c77efe237c01903fe5ff01e0cce801ed83fd69a510b15c30dd8793c06056f1c90b55db5ad00c1772a55ec19fc8a93b8cb53cd7b1d15c0f

    • SSDEEP

      6144:k0oGsQJE0N+3yDWwOCF4ePL1J2pdRWft6Iq7aMReqhxCs:kSs+f+3oWDFYvzft6Iq7aMEqhxCs

    • Downloads MZ/PE file

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand STEAM.

MITRE ATT&CK Enterprise v15

Tasks