Overview

overview

10

Static

static

10

9316b7b9af...88.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    9316b7b9affe0851d39a2c699f2f058d934bf27b9834e7afecb3461547c43288.zip
  • Size 3.1MB
  • Sample260909-vtaqdada32
  • SHA256 beabba473fd3fdf0da2f761eb3e98c231882e969bdacf2a1ce95f45e725a0c25
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
metastealerdiscoveryexecutionstealer

Malware Config

Extracted

Family

  • metastealer

C2

  • ikswccmqsqeswegi.xyz

  • aukuqiksseyscgie.xyz

  • ecucwceswgqiscai.xyz

  • ggeguiacmksquiwq.xyz

  • ikecgokgwsysscqe.xyz

  • ausmoiqykiskemym.xyz

  • koaywyekuqqeyyww.xyz

  • auegquiusggyykii.xyz

  • seaamokeuaweaima.xyz

  • wmyekoqqyyqyoqgu.xyz

  • yqaouccmkggsweqk.xyz

  • uiggiccuoaayaqec.xyz

  • qamcsicuaqsaaqyw.xyz

  • wmeqmmsqaiaayumg.xyz

  • ggkswqokuuisecci.xyz

  • owswomyokkgkyayg.xyz

  • uiqyyqqcscaiaska.xyz

  • uiuqygeuogieacgw.xyz

  • yqqeqcygyguuwwkk.xyz

  • qacmygkcsgcsysmm.xyz

Attributes
  • dga_seed

    8584

  • domain_length

    16

  • num_dga_domains

    10000

  • port

    443

Targets

    • Target
      9316b7b9affe0851d39a2c699f2f058d934bf27b9834e7afecb3461547c43288
    • Size 7.0MB
    • SHA256 9316b7b9affe0851d39a2c699f2f058d934bf27b9834e7afecb3461547c43288
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks