General

  • Target
    8d6c7b9fa465dcaf49e3bd183e289b63005777f5fe170805b4e1adeb2dab1101
  • Size 75KB
  • Sample250731-sye5jsbr2v
  • SHA256 8d6c7b9fa465dcaf49e3bd183e289b63005777f5fe170805b4e1adeb2dab1101
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • dacic

Version
  • v3.6

Campaign
  • Default

C2
  • 7.tcp.eu.ngrok.io:17884

Mutex
  • roblesdsrsn

Attributes
  • anti

    true

  • anti_process

    false

  • anti_process_mode

    false

  • bsod

    false

  • bypass

    false

  • file_hide

    false

  • folder_hide

    false

  • get_admins

    false

  • get_system

    false

  • hkcu

    false

  • hkcu_name

    Windows Defender

  • hklm

    false

  • hklm_name

    Windows Photos

  • hwid

    roblesdsrsn

  • install

    true

  • node32

    false

  • pastebin

    null

  • server_file

    obs-studio\updates.exe

  • server_folder

    appdata

  • startup

    false

  • startup_name

    Google common update

  • task_sheduler_for_server_autorun

    false

  • task_sheduler_for_server_shedule

    true

  • task_sheduler_for_server_shedule_name

    GoogleUpdateMachineUA

  • task_sheduler_for_watchdog_shedule

    true

  • task_sheduler_for_watchdog_shedule_name

    Chrome

  • user_init

    false

  • watchdog

    true

  • watchdog_file

    Google\Chrome\User Data\UserUpdate.exe

  • watchdog_folder

    appdatalocal

Targets

    • Target
      8d6c7b9fa465dcaf49e3bd183e289b63005777f5fe170805b4e1adeb2dab1101
    • Size 75KB
    • SHA256 8d6c7b9fa465dcaf49e3bd183e289b63005777f5fe170805b4e1adeb2dab1101
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks