Overview

overview

10

Static

static

3

registrator.exe

windows7-x64

10

registrator.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    236fdb6cd61c10db229dac003b0e6b5f_JaffaCakes118

  • Size

    6.8MB

  • Sample

    240508-gclvesdd81

  • MD5

    236fdb6cd61c10db229dac003b0e6b5f

  • SHA1

    3d61fbe55492846bf6037c99b8009a3f315eb5ca

  • SHA256

    a4b5ffda82de4984076ab7b4764a89e99f362242ad30e15b3e0c4dde358c27e6

  • SHA512

    429afbc045aa83d7c7c19a02d7f13727d897b2c2663b3a3b13dc08486eeaea31500e55fcea0cce5cc6044f4ac1bd9c18362b23dfe611d4d6246b6dadb289fc75

  • SSDEEP

    196608:w5O0GSJucd9ivNXF6xBb8rsu8U2dkqP2NBIg:v0G+ucdEN4b8wEHqPU

Score
10/10
ploutusatmbackdoor

Malware Config

Targets

    • Target

      registrator.exe

    • Size

      7.9MB

    • MD5

      21d6446dd4d7e7272a6f5b8584f04d9c

    • SHA1

      0fb47617d04185c16a6255ab0e0243a79076352f

    • SHA256

      7d369b6cc5baecdaea6b0553a4d992ab70605cf1e599f0b07d4acc225ec15a78

    • SHA512

      ff3724ff1f1234a2b75b636a4894090b27c10fa950ce3f64947dc13ec0a359b9d4b5c827e661af00d281d9a1155f8d38b49ddb35cab80e033f4e5263c1c7fdc5

    • SSDEEP

      196608:7jBEuQ0TicTvyvXVzsjrJ0vsk6a4dq7F:7WuQKicT2XoJ0UeX

    Score
    10/10
    ploutusatmbackdoor

    • Detected Ploutus loader

    • Ploutus

      Ploutus is an ATM malware written in C#.

      backdooratmploutus
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks