Overview

overview

10

Static

static

3

RFQ – Ma...60.exe

windows10-2004-x64

10

RFQ – Ma...60.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6
  • Size 1.9MB
  • Sample260720-mpt98ae16j
  • SHA256 be25cc0ee330f5a544b468e87879d5ab066acb712ad97bf7799fffa56333c7f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiontrojan

Malware Config

Targets

    • Target
      RFQ – Manufacturing Inquiry.#49160.exe
    • Size 3.4MB
    • SHA256 ae8e7ad14dec25f2ba87cae1510fbba1b46de9d24e967ad92eacc5217301e9c3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiontrojan

    • Windows security bypass

      defense_evasiontrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Windows security modification

      defense_evasiontrojan

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks