General

  • Target
    AIMr.AI.Free.zip
  • Size 75.7MB
  • Sample260620-lyvrnses5j
  • SHA256 de133d0f34710c566eee2468e5203a403add0713067b5d39ea5e74ba4a36121d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      AIMr.AI.Free.zip
    • Size 75.7MB
    • SHA256 de133d0f34710c566eee2468e5203a403add0713067b5d39ea5e74ba4a36121d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      AIMr.ico
    • Size 54KB
    • SHA256 e440d96915d3fe8e31d88437306482ae32df06ab98e074fd160b6a3ea611913a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      AIMr_AI_Free.exe
    • Size 52.6MB
    • SHA256 81a2b88790ab06c5d9e3ea9877b1e1114972374f18c5c7f73c9314c267fc1a30
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Target
      dll.dll
    • Size 3.0MB
    • SHA256 8a26c044ff15eee892341478e3b09e662ada16a30bfbb67d125d2b6b11eac306
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      theme.json
    • Size 6KB
    • SHA256 081c027b083cb6cae1e4c39dbd67a4194305f6f090811ade785e4e8bf801be02
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      yolo.cfg
    • Size 3KB
    • SHA256 a6415c2e303f7b3647913a7bb3675f0fe7234049d8875ae7d75c01b8e4dcb854
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      yolo.weights
    • Size 23.1MB
    • SHA256 cf9fbfd0f6d4869b35762f56100f50ed05268084078805f0e7989efe5bb8ca87
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks