file
Classification: Malicious
file is a malicious file sample. Linked to Turla, Oilrig activity. Reported by 2 threat sources, last seen 2023-05-05.
Detection summary
- 0 antivirus detections (61% detection ratio)
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TURLA (G0010) OILRIG (G0049)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2023-05-05 18:22:38 | 2023-05-05 18:22:38 | ||
| Turla | Maltiverse | 2023-03-03 04:26:37 | 2023-03-04 19:42:17 | malicious-activity | G0010 Turla |
| OilRig | Maltiverse | 2023-03-03 04:26:38 | 2023-03-04 19:42:02 | malicious-activity | G0049 OilRig |
Tags
apt hacktool metasploit meterpreter windows-server-utility apt34Sample information
- Filenames
- file
- File type
- PE32 executable (console) Intel 80386 Mono/.Net as ...
- Size
- 12800 bytes
- MD5
535e67930dfbec1a0ae2671b63e2ef8e- SHA-1
3b203f328048b837030b6f0ff595968486cc1b44- SHA-256
db9902cb42f6dc9f1c02bd3413ab3969d345eb6b0660bd8356a0c328f1ec0c07- First indexed
- 2023-03-04 19:42:02
- Last updated
- 2023-05-05 18:22:39
Process list
| Name | Command line |
|---|---|
| file.exe | |