General

  • Target

    cxapis.dll

  • Size

    10KB

  • Sample

    241023-tys7vazcrh

  • MD5

    4ae4a4a268ccd36acffa1674ebbf910e

  • SHA1

    b3737ff0d2296a6e5b652af1a4a519f2b336295b

  • SHA256

    910716461ccde7774e637f214bc1de262dce0c371751a585ed1dcf84ee748faf

  • SHA512

    5c80f85cdeb634be6986131c974b7a400a6cbac4b33e0a9c0523b679df2fea821322d32c8cb1870d6ad07bb5d1e9c35123cd89724de1a6b359b252ecced567be

  • SSDEEP

    192:UL7yBcpRmejh/vFDXtLwZgCw5c4uvFMURQDWVVUF6:UHyBcpRjjh/NtLwZJwNsMUV46

Malware Config

Targets

    • Target

      cxapis.dll

    • Size

      10KB

    • MD5

      4ae4a4a268ccd36acffa1674ebbf910e

    • SHA1

      b3737ff0d2296a6e5b652af1a4a519f2b336295b

    • SHA256

      910716461ccde7774e637f214bc1de262dce0c371751a585ed1dcf84ee748faf

    • SHA512

      5c80f85cdeb634be6986131c974b7a400a6cbac4b33e0a9c0523b679df2fea821322d32c8cb1870d6ad07bb5d1e9c35123cd89724de1a6b359b252ecced567be

    • SSDEEP

      192:UL7yBcpRmejh/vFDXtLwZgCw5c4uvFMURQDWVVUF6:UHyBcpRjjh/NtLwZJwNsMUV46

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks