General

  • Target

    Explosive Launcher.exe

  • Size

    22.3MB

  • Sample

    250121-dpnb8stlcv

  • MD5

    ddd9abe3b6c165dca62da949ee2f4084

  • SHA1

    5fc389f190857fb7f4a55f04037c94404dabf7d5

  • SHA256

    1efaca81cc2f95850a1d8b1728c866f37f1ce5bc74ff439a1dae9ce5b4e950fb

  • SHA512

    b838f73cc7fe968346893d93cc8b29a583d5be9f63b4a57fee063390395de5171901ebbdf9ac76afcf0aff2dd3e6555d02a9c9ad66e914704a9be384fa9a9084

  • SSDEEP

    393216:qYM4xYPYE4/5jpC1FhK+sQ4oy6OntgiOGIUrc7Cwrc2G/Ui6pBt/a9:9E4F4s3SOOiOdUrcprzG/Ul+

Malware Config

Targets

    • Target

      Explosive Launcher.exe

    • Size

      22.3MB

    • MD5

      ddd9abe3b6c165dca62da949ee2f4084

    • SHA1

      5fc389f190857fb7f4a55f04037c94404dabf7d5

    • SHA256

      1efaca81cc2f95850a1d8b1728c866f37f1ce5bc74ff439a1dae9ce5b4e950fb

    • SHA512

      b838f73cc7fe968346893d93cc8b29a583d5be9f63b4a57fee063390395de5171901ebbdf9ac76afcf0aff2dd3e6555d02a9c9ad66e914704a9be384fa9a9084

    • SSDEEP

      393216:qYM4xYPYE4/5jpC1FhK+sQ4oy6OntgiOGIUrc7Cwrc2G/Ui6pBt/a9:9E4F4s3SOOiOdUrcprzG/Ul+

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

MITRE ATT&CK Enterprise v15

Tasks