Overview

overview

7

Static

static

3

Spoof.rar

windows7-x64

7

Spoof.rar

windows10-2004-x64

7

Newtonsoft.Json.dll

windows7-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Spoofer.deps.json

windows7-x64

3

Spoofer.deps.json

windows10-2004-x64

3

Spoofer.exe

windows7-x64

1

Spoofer.exe

windows10-2004-x64

1

Spoofer.exe

windows7-x64

1

Spoofer.exe

windows10-2004-x64

1

Spoofer.pdb

windows7-x64

3

Spoofer.pdb

windows10-2004-x64

3

Spoofer.ru...g.json

windows7-x64

3

Spoofer.ru...g.json

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Spoof.rar

  • Size

    380KB

  • Sample

    241121-pcfbmsskbv

  • MD5

    0095fd6ea8efe265c67b99f3d3419992

  • SHA1

    eebb0844b8ed2ab028ae3299c10bd55f913b26d6

  • SHA256

    f9cccb173ebc5e4433b8533a22c1a61fd6b6ea04c5fe9d0fcd65707142315871

  • SHA512

    152361316db9659363162fd51d6274ba7a13b49e34e04e9e8b930110d1b4476e7cacdcfb8008678cac44e85dd80f214059d4558e92d76bb20b68c6a095b36ee3

  • SSDEEP

    6144:H5BmP6crUbRa4mFcBMn4LkpgIuWYT3WAIr7LC0Rd+92SRqX1wNVeQ6GAy6ZcnjHa:H5sqS4dT3u75RgMSgXmeGVTT5X/+Azyf

Score
7/10
discovery

Malware Config

Targets

    • Target

      Spoof.rar

    • Size

      380KB

    • MD5

      0095fd6ea8efe265c67b99f3d3419992

    • SHA1

      eebb0844b8ed2ab028ae3299c10bd55f913b26d6

    • SHA256

      f9cccb173ebc5e4433b8533a22c1a61fd6b6ea04c5fe9d0fcd65707142315871

    • SHA512

      152361316db9659363162fd51d6274ba7a13b49e34e04e9e8b930110d1b4476e7cacdcfb8008678cac44e85dd80f214059d4558e92d76bb20b68c6a095b36ee3

    • SSDEEP

      6144:H5BmP6crUbRa4mFcBMn4LkpgIuWYT3WAIr7LC0Rd+92SRqX1wNVeQ6GAy6ZcnjHa:H5sqS4dT3u75RgMSgXmeGVTT5X/+Azyf

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      Newtonsoft.Json.dll

    • Size

      695KB

    • MD5

      adf3e3eecde20b7c9661e9c47106a14a

    • SHA1

      f3130f7fd4b414b5aec04eb87ed800eb84dd2154

    • SHA256

      22c649f75fce5be7c7ccda8880473b634ef69ecf33f5d1ab8ad892caf47d5a07

    • SHA512

      6a644bfd4544950ed2d39190393b716c8314f551488380ec8bd35b5062aa143342dfd145e92e3b6b81e80285cac108d201b6bbd160cb768dc002c49f4c603c0b

    • SSDEEP

      12288:mFIM0KteTMN4Or4D3OdmZg5WHEaEDIGBBjgrIQtD+tVqDMW:6zMTMNNd+g5Wk78GBBjgrIQtDF

    Score
    1/10
    behavioral3behavioral4

    • Target

      Spoofer.deps.json

    • Size

      2KB

    • MD5

      db8284dc2f8127518f3b11c53cdfc016

    • SHA1

      42b3080b237a42a07685e67b543fa1c64271a82d

    • SHA256

      2f9509d3abe2ed95f304d74137a542f56888cc821afb9f7b1f0e79e8e2625fe0

    • SHA512

      90e89bde628afafef671257ece4e9bc2e3fff7b02dfd74f131c0ed48fb418cc00b9033fe71ca6c7d6381c85068508017660487bb27b1370f885ad854a925bdd5

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      Spoofer.dll

    • Size

      360KB

    • MD5

      9f39ccd606fa70c9cf492e5ee7286bec

    • SHA1

      d429e592f66877d1bc552ebaf9b0773ea9cb08c6

    • SHA256

      ef1752cf2cc946f71cea73089f20fc421680c013a1a9609d2e6b3408507db8d8

    • SHA512

      15b65a5029767a3485d9a38a3fb9477c59817b9609f459ad3e3b2f43355ee4e28ffb52667bf009680483690d9b50eea6dc0c6646ab097581778833e43fb1f8e4

    • SSDEEP

      3072:gMmP6LYXmmczkitvo4BpYN/6mBPry8TXROLdW5m4mUR59OOG60kS5fN:NmP6LYXmmA4NCmBPry/N2lOOr4

    Score
    1/10
    behavioral7behavioral8

    • Target

      Spoofer.exe

    • Size

      324KB

    • MD5

      6b3b6d47e47578f6b87e3f9f3bc3ead5

    • SHA1

      303e1f239d670fd54f700eb4753acf9f6179d314

    • SHA256

      440bcd5a5b480a1a82913b9d0bd1e79aaf646acaf48205a53e84dd86ffe959f9

    • SHA512

      4ca0e7ac813858e9dea1eb32938ff7382e6a12a8626603d5ffe114a92e2e303ecdc3d5696b8319596d36acee195fdc4a7fa6829e59e46a63add3abdae31936f6

    • SSDEEP

      3072:i5vnr5Tbx829UOeKnn2LFzZBp13u36wKp40ULCNor:iBKjK2LFzZNf/ULs

    Score
    1/10
    behavioral10behavioral9

    • Target

      Spoofer.pdb

    • Size

      18KB

    • MD5

      968c0b7daee54c863f20264a1cde93b0

    • SHA1

      aa17289b96d96446080e466c6e5544d528c4b14b

    • SHA256

      564ae9f85fb22c411887d6bef5c7aacb7527d35dbf087b048f10d4745fb698cf

    • SHA512

      cc6239b1476c751dd1b248bff9c22e51085023c5f9885e47008681b8145962ab3cab32cbc7121fb850d19c24f99b1bc1b01de360f6ec9799883b1334077d0910

    • SSDEEP

      384:Qw1+h6389lxonIaiaBs4PlGgeHynNttf/teJOWNHFfPwMBUYNBucsl2xnxnkvLD:x1+h6s2fn5ntePz8

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Spoofer.runtimeconfig.json

    • Size

      253B

    • MD5

      a99cf17269e974a55a22aa4187ac3587

    • SHA1

      808629af1af4d1e7beedee75814091d470b4c105

    • SHA256

      544df7ed624fb03f55ed0154fb06b728844a8a6d2d97466b544b5e125388b12e

    • SHA512

      11a1ea3b8f89e90dd824edbcc7846b271782fc30c857019413660ba37d09ae8677dde89d03503146987fe216ec72124ea02c8f21ae88422b93bf742c177cf20e

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks