Resubmissions

02-12-2024 20:44

241202-zjmdmsxpdm 10

02-12-2024 19:49

241202-yjvjksvrdj 10

General

  • Target

    FateInjector.exe

  • Size

    9.7MB

  • Sample

    241202-zjmdmsxpdm

  • MD5

    128591418af8fdc5d39ac51c1fda1e39

  • SHA1

    2fb6f80ced079a850efa8389255d57e152d96d4d

  • SHA256

    921e4dc1310131f3b0799ed3807dd67c7aa271e8e3c1af2c4d4322a5b6d09b26

  • SHA512

    a4d392bb54753a3e3a80124b194b3293d855a52c1c7e182424161193aa2ee563333108403cb576605f96d054c2dfd370fbb35ca8a8bcd8aaf106d41965f6f777

  • SSDEEP

    196608:qp0cDHwWIB5rntYcLjv+bhqNVoBKUh8mz4Iv9PeSEqu1D7AW:5iHo39L+9qz8/b4IpxuRAW

Malware Config

Targets

    • Target

      FateInjector.exe

    • Size

      9.7MB

    • MD5

      128591418af8fdc5d39ac51c1fda1e39

    • SHA1

      2fb6f80ced079a850efa8389255d57e152d96d4d

    • SHA256

      921e4dc1310131f3b0799ed3807dd67c7aa271e8e3c1af2c4d4322a5b6d09b26

    • SHA512

      a4d392bb54753a3e3a80124b194b3293d855a52c1c7e182424161193aa2ee563333108403cb576605f96d054c2dfd370fbb35ca8a8bcd8aaf106d41965f6f777

    • SSDEEP

      196608:qp0cDHwWIB5rntYcLjv+bhqNVoBKUh8mz4Iv9PeSEqu1D7AW:5iHo39L+9qz8/b4IpxuRAW

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Loads dropped DLL

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks