General
-
Target
mxbikes.exe
-
Size
3.6MB
-
Sample
241107-v4l66ayqdl
-
MD5
49ffb1b624e1746698c05aa962353768
-
SHA1
94f4083ddbfa537e08aa1f0de55a56146a8c6351
-
SHA256
598959308399a249c33e9249cd7511fa9c0c23df00b56ac1d71a7b9743bab1af
-
SHA512
8dab9e208003d37993b978a9e2e6cf1c5354c4e3300db97a4d1850227a438af28796b7f902f7c05b9251ea604fbb1557f6bdbb25c4bb4ba43f3dc009e5842862
-
SSDEEP
49152:eJRTFGeek0zge76irmN0v4Ck1HpDDCwo40mjwrvX6OpePuboh0DW6NnCn0hFToSJ:duupCHlmoSDW6NnC0h68b
Static task
static1
Malware Config
Targets
-
-
Target
mxbikes.exe
-
Size
3.6MB
-
MD5
49ffb1b624e1746698c05aa962353768
-
SHA1
94f4083ddbfa537e08aa1f0de55a56146a8c6351
-
SHA256
598959308399a249c33e9249cd7511fa9c0c23df00b56ac1d71a7b9743bab1af
-
SHA512
8dab9e208003d37993b978a9e2e6cf1c5354c4e3300db97a4d1850227a438af28796b7f902f7c05b9251ea604fbb1557f6bdbb25c4bb4ba43f3dc009e5842862
-
SSDEEP
49152:eJRTFGeek0zge76irmN0v4Ck1HpDDCwo40mjwrvX6OpePuboh0DW6NnCn0hFToSJ:duupCHlmoSDW6NnC0h68b
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Legitimate hosting services abused for malware hosting/C2
-