General

  • Target
    rock_breaker_v1.9.zip
  • Size 529KB
  • Sample260809-pjswbaxfkb
  • SHA256 677b060d0597ca7a017b6759769fdb629ba4e33b95e7c3354eda664c989b2e8b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Launcher.cmd
    • Size 26B
    • SHA256 3f4c88d65a5b792d3234a8cb966154550f1d9b9eaefd2474c01f97b21f46733c
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      bytecode.txt
    • Size 292KB
    • SHA256 35d19eba58c4db6e034e7965ac41a2b02a26f26ca9cfcfb5ec8cb1690ec86c5e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      gcm.exe
    • Size 753KB
    • SHA256 4c469dadda5529047b063dd2e91ec36c409b4cbe6cf3576ae7db02e79e4d51f7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks