General

  • Target

    355c27cf243ce806bc7957b587b4745b3fa3c4b8a3cf60461566a7da0c3a9649

  • Size

    4.8MB

  • Sample

    211014-hls6jagcam

  • MD5

    b64e13c40af7e7116310624b5f1a6b15

  • SHA1

    ca93cdd6ee33c6c4ba3726439ff03839e62b127d

  • SHA256

    355c27cf243ce806bc7957b587b4745b3fa3c4b8a3cf60461566a7da0c3a9649

  • SHA512

    584bb8feba0ab71a57c0f6682cc76d256e5656c075e508e6f7d6c13952d191308d4fde026b77f0aa25a78d5abd02e931238862aad7742a562cea7d07250cf5ba

Score
8/10

Malware Config

Targets

    • Target

      355c27cf243ce806bc7957b587b4745b3fa3c4b8a3cf60461566a7da0c3a9649

    • Size

      4.8MB

    • MD5

      b64e13c40af7e7116310624b5f1a6b15

    • SHA1

      ca93cdd6ee33c6c4ba3726439ff03839e62b127d

    • SHA256

      355c27cf243ce806bc7957b587b4745b3fa3c4b8a3cf60461566a7da0c3a9649

    • SHA512

      584bb8feba0ab71a57c0f6682cc76d256e5656c075e508e6f7d6c13952d191308d4fde026b77f0aa25a78d5abd02e931238862aad7742a562cea7d07250cf5ba

    Score
    8/10
    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks