Resubmissions

14-01-2025 09:10

250114-k48eaatncw 8

14-01-2025 08:58

250114-kxfqpavrdj 10

General

  • Target

    libcrypto-3-x64.dll

  • Size

    4.5MB

  • Sample

    250114-k48eaatncw

  • MD5

    a9c1f7ca15c65c139bc9d4bf57df2e1e

  • SHA1

    1b1377139a6b289d43a6b1161cd1089ffc817cf9

  • SHA256

    03ec9292dcdfda520638490e11baeefff5ab1b6eb22feb90a22fc771272ce116

  • SHA512

    97f8745dba6330c196de9b822638bfe7f74a86bdcb6726f4bd1d3d917de54f9abcb05163c42255173eac3bde995f0d611af718dbcc0de432b67666bed0c0b073

  • SSDEEP

    98304:Ml+f+K26t8Te5zUeP4xA1CPwDvt3uFGCCQ:4Ctt8Te5zUewxA1CPwDvt3uFGCC

Malware Config

Targets

    • Target

      libcrypto-3-x64.dll

    • Size

      4.5MB

    • MD5

      a9c1f7ca15c65c139bc9d4bf57df2e1e

    • SHA1

      1b1377139a6b289d43a6b1161cd1089ffc817cf9

    • SHA256

      03ec9292dcdfda520638490e11baeefff5ab1b6eb22feb90a22fc771272ce116

    • SHA512

      97f8745dba6330c196de9b822638bfe7f74a86bdcb6726f4bd1d3d917de54f9abcb05163c42255173eac3bde995f0d611af718dbcc0de432b67666bed0c0b073

    • SSDEEP

      98304:Ml+f+K26t8Te5zUeP4xA1CPwDvt3uFGCCQ:4Ctt8Te5zUewxA1CPwDvt3uFGCC

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks