Overview

overview

6

Static

static

5

xaLicenseG...or.exe

windows10-2004-x64

6

xaLicenseG...or.exe

windows11-ltsc_2024-x64

5

xaLicenseG...or.xml

windows10-2004-x64

3

xaLicenseG...or.xml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    adad.zip
  • Size 177KB
  • Sample260906-2x7mvadf53
  • SHA256 0b5ac1b7b8c0150f5634b81705c8fe37f73bbc8808df422cd52df3353ef4a359
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwarediscoverymotwphishingspyware

Malware Config

Targets

    • Target
      xaLicenseGenerator.exe
    • Size 450KB
    • SHA256 dc8bcf028b4205b6fd3ac10704b6b931fe94cab8c7c429347b7a97f66be75679
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discoverymotwphishing

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw

    • ConfuserEx .NET packer

      Detects ConfuserEx .NET packer.

    behavioral1behavioral2
    • Target
      xaLicenseGenerator.xml
    • Size 282B
    • SHA256 1d495f3e22405e77d9fff96c6dc454e3339a7ef7d5d81f808d161741f99a6149
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks