General

  • Target

    8ec22a0bb8a89a070233fd62c19bfb9d6ec6663d659da9b7577da7a3b8e23821.exe

  • Size

    1.2MB

  • Sample

    241121-fs848ayphy

  • MD5

    e9d3c9c75c2b063aafb5251e16328831

  • SHA1

    3e9e3eb457c189e03635edc4f5172b4d218c4be6

  • SHA256

    8ec22a0bb8a89a070233fd62c19bfb9d6ec6663d659da9b7577da7a3b8e23821

  • SHA512

    4b77bbb38ca0622c9f97f43b63c9ecea1511439320aac606de2e8efea63d2a936a4f92ca8ce06b0000aafdbc9c95aa08abbcecaed1c732fcf3d50accada3fddd

  • SSDEEP

    24576:eAHnh+eWsN3skA4RV1Hom2KXMmHa3t2smYe+n7ELue0hgU56:Jh+ZkldoPK8Ya3tjkc7Aue0N6

Score
10/10

Malware Config

Extracted

Credentials

  • Protocol:
    ftp
  • Host:
    185.212.130.11
  • Port:
    21
  • Username:
    user79739
  • Password:
    Repriza1337

Targets

    • Target

      8ec22a0bb8a89a070233fd62c19bfb9d6ec6663d659da9b7577da7a3b8e23821.exe

    • Size

      1.2MB

    • MD5

      e9d3c9c75c2b063aafb5251e16328831

    • SHA1

      3e9e3eb457c189e03635edc4f5172b4d218c4be6

    • SHA256

      8ec22a0bb8a89a070233fd62c19bfb9d6ec6663d659da9b7577da7a3b8e23821

    • SHA512

      4b77bbb38ca0622c9f97f43b63c9ecea1511439320aac606de2e8efea63d2a936a4f92ca8ce06b0000aafdbc9c95aa08abbcecaed1c732fcf3d50accada3fddd

    • SSDEEP

      24576:eAHnh+eWsN3skA4RV1Hom2KXMmHa3t2smYe+n7ELue0hgU56:Jh+ZkldoPK8Ya3tjkc7Aue0N6

    Score
    10/10
    • Executes dropped EXE

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks