Overview

overview

10

Static

static

10

ec79b825ba...34.dll

windows7-x64

3

ec79b825ba...34.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec79b825bad3af2092d6890b34faf2cb5f93bbb01128c8b3d88204196f3f6834

  • Size

    1.2MB

  • Sample

    241228-b56gmstnfp

  • MD5

    ab7e85f54f9fc81a1dc67e6bd1bb688e

  • SHA1

    b7bbf8f8681ee778822017c1075d97744df4d01a

  • SHA256

    ec79b825bad3af2092d6890b34faf2cb5f93bbb01128c8b3d88204196f3f6834

  • SHA512

    bff9d16268a498d9dac71ab6600d6ac2111cc606fdd6d82644b48692339d379112f87d25f285a2573f7d06f0a675de696df7565cfb05e0da32c3ce732f48b2b7

  • SSDEEP

    24576:K1n7P9ULut7UuoGsGZiUhS/VKXteAoM5WbUg/n3MtRldzFjKtTLeXK07:iBLqbGMTLY

Score
10/10
gh0stratpurplefoxdiscoveryrootkit

Malware Config

Targets

    • Target

      ec79b825bad3af2092d6890b34faf2cb5f93bbb01128c8b3d88204196f3f6834

    • Size

      1.2MB

    • MD5

      ab7e85f54f9fc81a1dc67e6bd1bb688e

    • SHA1

      b7bbf8f8681ee778822017c1075d97744df4d01a

    • SHA256

      ec79b825bad3af2092d6890b34faf2cb5f93bbb01128c8b3d88204196f3f6834

    • SHA512

      bff9d16268a498d9dac71ab6600d6ac2111cc606fdd6d82644b48692339d379112f87d25f285a2573f7d06f0a675de696df7565cfb05e0da32c3ce732f48b2b7

    • SSDEEP

      24576:K1n7P9ULut7UuoGsGZiUhS/VKXteAoM5WbUg/n3MtRldzFjKtTLeXK07:iBLqbGMTLY

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks