Overview

overview

5

Static

static

Invoice_or...09.exe

windows7_x64

5

Invoice_or...09.exe

windows10_x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Invoice_ord00000009.exe

  • Size

    64KB

  • Sample

    210408-m8ecb5fqja

  • MD5

    deb1d2962bb60e9c1901ef8b8e9f6849

  • SHA1

    e92647ce6968e9839c4398bb8916213798928a66

  • SHA256

    f6f89449abb24af3cfaf23fb4274541b5ee872a16bb9e6c9fe411e8a557000a7

  • SHA512

    4a75e515800b8f85e4663c9e3b729f15a0dedbebe457e0e1bba473e47ce6ea81896b016946fd2ac6527a1874f9aec23ee97f1b378c07208dfdc7f93dd1154931

Score
5/10

Malware Config

Targets

    • Target

      Invoice_ord00000009.exe

    • Size

      64KB

    • MD5

      deb1d2962bb60e9c1901ef8b8e9f6849

    • SHA1

      e92647ce6968e9839c4398bb8916213798928a66

    • SHA256

      f6f89449abb24af3cfaf23fb4274541b5ee872a16bb9e6c9fe411e8a557000a7

    • SHA512

      4a75e515800b8f85e4663c9e3b729f15a0dedbebe457e0e1bba473e47ce6ea81896b016946fd2ac6527a1874f9aec23ee97f1b378c07208dfdc7f93dd1154931

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks