General

  • Target
    RoPing.exe
  • Size 30KB
  • Sample260819-ved49agc84
  • SHA256 d8f68b8a83501d5aec828bb8fd9a7ff51b9b13526387e5715cd64aa4e07a0e44
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      RoPing.exe
    • Size 30KB
    • SHA256 d8f68b8a83501d5aec828bb8fd9a7ff51b9b13526387e5715cd64aa4e07a0e44
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Adds Run key to start application

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks