Resubmissions

30/12/2024, 16:23

241230-tvzv8azjer 7

30/12/2024, 16:12

241230-tnj67ayrep 7

General

  • Target

    a2a7dcce330cf557b3cf155d73c2e4369ddddd30433e9b070307b78246df9ab3.exe

  • Size

    133KB

  • Sample

    241230-tvzv8azjer

  • MD5

    5c1d64f64d399812bea9c81f82a61844

  • SHA1

    7bbe3c4f4876afc40b7516f50d263a3f15adb9e4

  • SHA256

    a2a7dcce330cf557b3cf155d73c2e4369ddddd30433e9b070307b78246df9ab3

  • SHA512

    c67fba2cae5ab474aabe990d7536a084747ef90e02a3f2f239e68e475b4b7c7b4bf228acb29643a7a0e805b73aa5f1c5d6ace07c092e38185106582d209422dc

  • SSDEEP

    3072:avXqJmS/lNvSzPRWLdq+H7PDihN+bkQXeSH+5WSh7KXbD:dc8lNWPwLtH7PDih0bkLAtSh7qb

Score
7/10

Malware Config

Targets

    • Target

      a2a7dcce330cf557b3cf155d73c2e4369ddddd30433e9b070307b78246df9ab3.exe

    • Size

      133KB

    • MD5

      5c1d64f64d399812bea9c81f82a61844

    • SHA1

      7bbe3c4f4876afc40b7516f50d263a3f15adb9e4

    • SHA256

      a2a7dcce330cf557b3cf155d73c2e4369ddddd30433e9b070307b78246df9ab3

    • SHA512

      c67fba2cae5ab474aabe990d7536a084747ef90e02a3f2f239e68e475b4b7c7b4bf228acb29643a7a0e805b73aa5f1c5d6ace07c092e38185106582d209422dc

    • SSDEEP

      3072:avXqJmS/lNvSzPRWLdq+H7PDihN+bkQXeSH+5WSh7KXbD:dc8lNWPwLtH7PDih0bkLAtSh7qb

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks