Resubmissions

19-12-2024 11:32

241219-nnswfasnds 8

19-12-2024 11:31

241219-nmrxrasmhy 10

19-12-2024 11:28

241219-nlhbxssqer 5

19-12-2024 11:15

241219-nclyrasmfr 10

General

  • Target

    AutoClicker-3.0.exe

  • Size

    844KB

  • Sample

    241219-nnswfasnds

  • MD5

    7ecfc8cd7455dd9998f7dad88f2a8a9d

  • SHA1

    1751d9389adb1e7187afa4938a3559e58739dce6

  • SHA256

    2e67d5e7d96aec62a9dda4c0259167a44908af863c2b3af2a019723205abba9e

  • SHA512

    cb05e82b17c0f7444d1259b661f0c1e6603d8a959da7475f35078a851d528c630366916c17a37db1a2490af66e5346309177c9e31921d09e7e795492868e678d

  • SSDEEP

    12288:GaWzgMg7v3qnCiWErQohh0F49CJ8lnybQg9BFg9UmTRHlM:BaHMv6CGrjBnybQg+mmhG

Malware Config

Targets

    • Target

      AutoClicker-3.0.exe

    • Size

      844KB

    • MD5

      7ecfc8cd7455dd9998f7dad88f2a8a9d

    • SHA1

      1751d9389adb1e7187afa4938a3559e58739dce6

    • SHA256

      2e67d5e7d96aec62a9dda4c0259167a44908af863c2b3af2a019723205abba9e

    • SHA512

      cb05e82b17c0f7444d1259b661f0c1e6603d8a959da7475f35078a851d528c630366916c17a37db1a2490af66e5346309177c9e31921d09e7e795492868e678d

    • SSDEEP

      12288:GaWzgMg7v3qnCiWErQohh0F49CJ8lnybQg9BFg9UmTRHlM:BaHMv6CGrjBnybQg+mmhG

    • Disables Task Manager via registry modification

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks