General

  • Target
    Agent64_binder.zip
  • Size 14.7MB
  • Sample260705-bk5plsbw5p
  • SHA256 1f71174a4a0ed9d1e608275e4fd5bc9f778d608b6b000156992dcde60947a235
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Agent64 binder/Agent 64 Binder.exe
    • Size 15.3MB
    • SHA256 471dda55d94fc0f9f8c9e14950e0f1dfdafd9ada33e092641fb427eb3273c75e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Target
      Agent64 binder/agent64 binder source code.py
    • Size 8KB
    • SHA256 fb2064568b66cbb37119e100c8190a1d655a642d2d1f5d0decb2fb46b4987622
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks