General

  • Target

    Spymx4.0Activated.rar

  • Size

    103.7MB

  • Sample

    241203-3qj4mszqhw

  • MD5

    1ae0303ecbe331a392caa6d6d9f89f78

  • SHA1

    eddcf0b102a2dbdd061871651cd668696295260f

  • SHA256

    6b429354c41e104055d565f6e084031c967845873c2f4c8d408348c04cbf39ee

  • SHA512

    f68f7eafaad317eaefbdc1f844cdb6610bf2e64a5139130c644db40f9a230949102d2588eb50896ce1185c45bccd2e61d7c5168c8f2209f97ce8f9ba5c4d1aa8

  • SSDEEP

    3145728:/iA5iqfx8HXasjGpPpBKrsi3RBsBKMp3zl:/iCi4G3mpBBKrsi3b+KMRzl

Score
10/10

Malware Config

Extracted

Family

spymax

C2

[SPY_MAX_IP]:[SPY_MAX_PORT]

Targets

    • Target

      Spymax 4.0 Activated/SpyMax 4.0.exe

    • Size

      2.4MB

    • MD5

      8343d36e6d175e648796e0b4619509e8

    • SHA1

      55072df90b4dde636ac9224da96b292d541a51ae

    • SHA256

      982608c4bc15e5d7f36660665d96b5625d5cfffd63c895ed67956562a6807b8a

    • SHA512

      18e5319a9d3e33cfdc74b847f8d4eeb9ce59fc0b0674561c6aa16d925bb2feb1084814b6dfe2da8c9526a1fae10636796b85ecd227bd8f741461ed57d5b4cf86

    • SSDEEP

      49152:qIJfVyhrxCsY5SuQhk10PnXoCCCRsTWNPHlPp6b+x:qIJdyXRYlSq0Pn4C6TYPHlh0+

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Lib/Build.exe

    • Size

      51KB

    • MD5

      bb9333335e260d27d513b7168c46ebd0

    • SHA1

      2362797fe08013602b0253502ef66ef57f730791

    • SHA256

      bdd100c9b0cfde21cba33dd74b9149898cddb2917ec8e2ef80d2c2d1bf255c73

    • SHA512

      59ff1e9e21aad6d1a6dc7da78a3bcedbbc83191d07cfca1f09eab7c4ccebc8f32dd033742175c5c27e7fc9abaa5237dff88f3cb1087e4d73f99bf9c2c51b4ae0

    • SSDEEP

      1536:CewietCJQAIC4MLLLYfmnYMwGNyEarw47vmVcl:Cvbw8MwGNyEax7v8Y

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Lib/LibGSM.dll

    • Size

      6KB

    • MD5

      5d552d57a008c1282f1b7263a65f707e

    • SHA1

      0f6cfe5a5798c762bc01e8b9846b5a8417b3c246

    • SHA256

      d287bd2e539bb200e79a23450597b66f0366e627bb5f249b74b266696f3f665d

    • SHA512

      229a771d59e86aaff5e86e9e3c9b63234c52bd2021328ff6aa99f3e2b8be3926d11e384ed439eeadaa96ce692b2b2a2cb46c73ec56a782afa8eb7c04e0b7bb13

    • SSDEEP

      96:P21/ap0QgIEq2PjTy4RKHFpTTEtBY+9JenP9h1:PSiJYYTTEwuJI

    Score
    1/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-1.pl

    • Size

      5KB

    • MD5

      210fca93da3cd2aa7aab223b4f6483c9

    • SHA1

      153c8c62718162c732eda2b520aa361eed479d83

    • SHA256

      74be0a34fa03858f3a80f7a7e0df7359d1a27185de342e5541975e53658eeb55

    • SHA512

      d3c3a81a2924be5eb468209d02efa229d5e579b7bc1f8d6cdb5fc5b589888cdd7ec5849641e8b1405fc23d06dd0c7b30d59e0a991d036f52d74291a7e9439188

    • SSDEEP

      96:JK+BK+nexThxmd4JD7sNG7Z/dWCjjEa5QAcreTXKrEx08zTGarFAQA1/:YAK+nexTo4b/UC0iUe91zTG4FAQA1/

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-2.pl

    • Size

      4KB

    • MD5

      0037f9d6a388db91c980351af4c03b2f

    • SHA1

      9384a65d636944e42c0e93310dacf68dfe016782

    • SHA256

      f0326ad672ec2278750232cc920769710972da0594f45641441a4327a555cb8e

    • SHA512

      6ae67ad4d61ffd437c7b5b6044c6cc2c99b47619e0a7d3338322e3df1181dc66bed393a2466953e5b4eafb8d4b2fd7864e61b04479e74e0ffe1fd8d1cdc6d57e

    • SSDEEP

      96:2Pm57RfU5dE1Yn8RA9O6vUfXDmzWyPVEjCjpHY0e3/:2O5lw8RAU0UfXalNK0xYD

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-3.pl

    • Size

      5KB

    • MD5

      a03b010aaedc90001f105b4858a4e8d1

    • SHA1

      44191d7dfea55cf37b6b14193801c90741ebb8cf

    • SHA256

      42c8d417fcc509864d08d42ef61a4926a17010abce6c1f06187acd931a9eeaab

    • SHA512

      8769d8329172a6d95b99056bd0b05ccab41c9b4b9b7efe16f2fb22a3f8acbab98d273a3c6bf2e845934ed58e95a08229f0fe27f78f057ca2c3f2ad547f863145

    • SSDEEP

      96:2Pm571ukquJN67N72vNx+y/NeFyocWiBhpWKvgnJyC5a4h7Ybt:2OauuhI9/8/X+pRvgnJR5a4h0p

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-4.pl

    • Size

      14KB

    • MD5

      33f98552fc39eba4d6db688ed8f34765

    • SHA1

      61389d16fa5e03c44e14ebd301271225b69d254d

    • SHA256

      83fb2d28521c56153835161c2d8a0bdf52f19a98a0d93a8570eac7c265e1cd09

    • SHA512

      479128578f138eb8706429db3b8e9061a15580fe5a38ca7ed83f355d110357239cf814dbe7b7b75de26553b93270560a0d9be73da4ffcd4a67ea313a4f9b0081

    • SSDEEP

      384:q+rHdaDP+mQtETs+ETaw9op0o37cWx9qwKCY1AoVIYgteut:qedk2mQtms+V6op5qPCY1qLH

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-5.pl

    • Size

      10KB

    • MD5

      ee15076a76ac45beaf0e1dd82bc02c43

    • SHA1

      ece5553a080928419d25deede65fe86ae4fc1292

    • SHA256

      627ed3f263422bc9a2887a5b8e81f0478a9e607864b71fcdd3bb6914b6ac9224

    • SHA512

      51a046e7417dcd0a9d6a5d5262729d5817102e21bf303c80522b79211b45da37ea0299941982618dea885b08423f633f9e918dbc8678bfc764ff9a1416feb22c

    • SSDEEP

      192:YAK++M6ZIOlY+kwkXicBLwkIMOqxr+tRgtB9uchd0/dtNVpv8B1p4Sn1RksOsBr:q++fyd+gdMk1O8cihi/dXLK16S1RHOs1

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-6.pl

    • Size

      7KB

    • MD5

      d324afb827bc0410b7387f2f22d14242

    • SHA1

      bc8e494e86e41bee2ce2add6d0fe8919656a7102

    • SHA256

      69572ff59d2f8b428fa2e5fad4c6abfaa78813b889740a0b17c3bf4ff522f2c7

    • SHA512

      c337ade6028a734922d91e96abf87f889d57ebe825ab0a4c0d927cffb26e38558fc1c3f61ee042f423e639e60637b4b41cd436aebc054df2196868d58bcf428b

    • SSDEEP

      192:2OkFCNbNbSdOYT7Ax0xrUhmE7OH7Vgpet+gfLTkRQi33o+:2pFCNIdO24gr9EiH7V03gfnkq+

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-7.pl

    • Size

      5KB

    • MD5

      a9f48543cf1571322f575724a0e8de35

    • SHA1

      edaaf35c07045f0d0376202700d1d3213e42c246

    • SHA256

      3a36e9b32c7bee100d590a31b8e622a229c6168e2fcd95dbd9fa934025e6787b

    • SHA512

      0b7f72c4b68e78f2c73485387a3d6e0d2dc92a2298bf0f737ccf1d4bf508db1e96a164550ed7a3a0a74f99cc89d989e1d28ecd986c4f164a0b22e9760dadadc1

    • SSDEEP

      96:2Pm57cUV8+pZmIjZ9gZdXarsspyqU0H16DN1kvZFgfqYTfTvPNLMrnSkCXeYH/:2OduEmIj8ZdKrQ0HkzkvZFO31YdCuI/

    Score
    3/10
    • Target

      Spymax 4.0 Activated/res/Plugins/Android/gen-8.pl

    • Size

      4KB

    • MD5

      767a048eec9220ff6d1434f8a6e6bcff

    • SHA1

      c328487ea7944dd413e6675065a4f22a8b0835eb

    • SHA256

      ed866f146cc3cec59e01c9ec18aa62d25590c9f789ec127c4c8d29350970edeb

    • SHA512

      4bc516c28b4d701153fec415c666f466f21aa095f6ab396cc98f84dadfb20fc60c47a6d6fe52ec43e964bc38fd1ac779e512171c6435f261710f53bdd3e7aa3a

    • SSDEEP

      96:JK+BK+W8yWwp+sT+YEIjxVuakCSq2z50gcBXfj8dPaQnmeCwKGS4AE9Wq:YAK+DrOfOIV7kx/cd8U5e0rZlq

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks