Overview

overview

7

Static

static

3

RawSpoofer.exe

windows11-ltsc_2024-x64

7

backend.pyc

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    RawSpoofer.exe
  • Size 13.9MB
  • Sample260709-ssvytadx2s
  • SHA256 363c4772170c341c33d3f65cc8b23ce850cecd54ac2345f1a73e06ac91dc6c54
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
pyinstaller

Malware Config

Targets

    • Target
      RawSpoofer.exe
    • Size 13.9MB
    • SHA256 363c4772170c341c33d3f65cc8b23ce850cecd54ac2345f1a73e06ac91dc6c54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1
    • Target
      backend.pyc
    • Size 37KB
    • SHA256 a7e6b7d252c87f25ddb03b33cd6022d5f93640f338d163389365d196524f4a91
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks