General

  • Target

    RexonPAID (1).dll

  • Size

    15.1MB

  • Sample

    241222-bm22haxldv

  • MD5

    f8c1a7dd04e2a3c11325ffffa4f3b5fb

  • SHA1

    34af4211c36b958295ba9ef4ef7ab1b6d3d750de

  • SHA256

    1c341ee1a6d54f9e4d99b7d81e94874bfaec72006f7f6544f80d6f8867a7b316

  • SHA512

    00c2b061b9c1337818583bb50897840929e5d935365324b59ff364d9bad729b66c29e8a86bcbdc230195be587bb47c821e3bb012242de066f9bcc7a1f63d05de

  • SSDEEP

    393216:wDWEZr/NeIo9nagxsKmtFHvfCISTTGVFn8X9Cj8105lDovHfkNiRQ4zdF:wDWEZr/NeIMnagxsKmtFHvKISTTGVFna

Malware Config

Targets

    • Target

      RexonPAID (1).dll

    • Size

      15.1MB

    • MD5

      f8c1a7dd04e2a3c11325ffffa4f3b5fb

    • SHA1

      34af4211c36b958295ba9ef4ef7ab1b6d3d750de

    • SHA256

      1c341ee1a6d54f9e4d99b7d81e94874bfaec72006f7f6544f80d6f8867a7b316

    • SHA512

      00c2b061b9c1337818583bb50897840929e5d935365324b59ff364d9bad729b66c29e8a86bcbdc230195be587bb47c821e3bb012242de066f9bcc7a1f63d05de

    • SSDEEP

      393216:wDWEZr/NeIo9nagxsKmtFHvfCISTTGVFn8X9Cj8105lDovHfkNiRQ4zdF:wDWEZr/NeIMnagxsKmtFHvKISTTGVFna

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand MICROSOFT.

MITRE ATT&CK Enterprise v15

Tasks