Resubmissions

03-12-2024 17:48

241203-wdkfba1rcr 7

03-12-2024 17:45

241203-wbzgfswlf1 7

General

  • Target

    dsga.zip

  • Size

    20KB

  • Sample

    241203-wdkfba1rcr

  • MD5

    fd4047657685ab451f9ed40b5003ce15

  • SHA1

    02b0c58f5917a2e6837b028cd3ccc4be7335f8ef

  • SHA256

    56a4d5867bf35942b66e005d3691fe9b12ee50e122949e0d4d1fde07feede2cd

  • SHA512

    bbd7f057381285d66ac94a9bca3bfdf81ced1d6ea4273409b831403c4f4827f79add6b3d9fdd70299934f114ab160466eb0d2a71e04e397e071739d03360ab27

  • SSDEEP

    384:JIDZNNgJii6B2LdcDQCdjqAEckLsyHCEiSX8EkIHjkWTHOc6K8St:JapXBidcn5kLsytiSlDbHVXt

Malware Config

Targets

    • Target

      dsga.zip

    • Size

      20KB

    • MD5

      fd4047657685ab451f9ed40b5003ce15

    • SHA1

      02b0c58f5917a2e6837b028cd3ccc4be7335f8ef

    • SHA256

      56a4d5867bf35942b66e005d3691fe9b12ee50e122949e0d4d1fde07feede2cd

    • SHA512

      bbd7f057381285d66ac94a9bca3bfdf81ced1d6ea4273409b831403c4f4827f79add6b3d9fdd70299934f114ab160466eb0d2a71e04e397e071739d03360ab27

    • SSDEEP

      384:JIDZNNgJii6B2LdcDQCdjqAEckLsyHCEiSX8EkIHjkWTHOc6K8St:JapXBidcn5kLsytiSlDbHVXt

    • Executes dropped EXE

    • Loads dropped DLL

    • System Binary Proxy Execution: Verclsid

      Adversaries may abuse Verclsid to proxy execution of malicious code.

MITRE ATT&CK Enterprise v15

Tasks