Overview

overview

8

Static

static

PO# 5604 &...td.exe

windows7_x64

8

PO# 5604 &...td.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    PO# 5604 & Price List SF#163188104021 WinTide Brand Ltd.exe
  • Size 2.4MB
  • Sample201027-kdccsbglc6
  • SHA256 f671b1f716f0176dbaec5ea7ca024cb32f65fe5ceceaf99a80ce080132ec9dd7
  • MD5 SHA1 SHA512
Score
8/10
upx

Malware Config

Targets

    • Target
      PO# 5604 & Price List SF#163188104021 WinTide Brand Ltd.exe
    • Size 2.4MB
    • SHA256 f671b1f716f0176dbaec5ea7ca024cb32f65fe5ceceaf99a80ce080132ec9dd7
    • MD5 SHA1 SHA512
    Score
    8/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks