Resubmissions

02-12-2024 01:29

241202-bwgrxsslev 6

01-12-2024 01:16

241201-bm536a1rbv 7

01-12-2024 01:06

241201-bf6q4swlcn 6

30-11-2024 23:55

241130-3yyxrstqbq 6

30-11-2024 23:55

241130-3ypn4azjfv 6

30-11-2024 23:35

241130-3lf67atmal 6

30-11-2024 22:13

241130-15bppsxjhx 7

27-11-2024 20:24

241127-y6snhaynhv 7

26-11-2024 17:03

241126-vkvzyswqdk 7

General

  • Target

    psr.exe

  • Size

    13.4MB

  • Sample

    241201-bf6q4swlcn

  • MD5

    33c9518c086d0cca4a636bc86728485e

  • SHA1

    2420ad25e243ab8905b49f60fe7fb96590661f50

  • SHA256

    ba30ea16cd8fbd9209d40ae193206ad00f042d100524cf310982c33369325ca2

  • SHA512

    6c2c470607b88e7cd79411b7a645b395cee3306a23e6ba50b8ac57f7d5529a1b350c34e19da69aeb1ffade44d5187b4a1ef209a53d21a83e9e35add10fc7867d

  • SSDEEP

    49152:W/XzWTJmbjeHLKLpyNpaQ+69tPvGUmskDXs4Awd9CBqcUiInvlT2hPnXiwzYJ33S:W/EmGrKL2pllzP+UNkEARmzY1C

Score
6/10

Malware Config

Targets

    • Target

      psr.exe

    • Size

      13.4MB

    • MD5

      33c9518c086d0cca4a636bc86728485e

    • SHA1

      2420ad25e243ab8905b49f60fe7fb96590661f50

    • SHA256

      ba30ea16cd8fbd9209d40ae193206ad00f042d100524cf310982c33369325ca2

    • SHA512

      6c2c470607b88e7cd79411b7a645b395cee3306a23e6ba50b8ac57f7d5529a1b350c34e19da69aeb1ffade44d5187b4a1ef209a53d21a83e9e35add10fc7867d

    • SSDEEP

      49152:W/XzWTJmbjeHLKLpyNpaQ+69tPvGUmskDXs4Awd9CBqcUiInvlT2hPnXiwzYJ33S:W/EmGrKL2pllzP+UNkEARmzY1C

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks