Overview

overview

10

Static

static

528f620f2c...c4.exe

windows7_x64

10

528f620f2c...c4.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    528f620f2cd3e22ce81c119a51801527a0ca2a1e5f3c05cf31591a28858359c4

  • Size

    955KB

  • Sample

    220324-yc3xdaded9

  • MD5

    38c0511fa37c2f89a7a64f98065fc8a5

  • SHA1

    e279a64626c4819727390916993a679ce22ab183

  • SHA256

    528f620f2cd3e22ce81c119a51801527a0ca2a1e5f3c05cf31591a28858359c4

  • SHA512

    38e254745b5843b1edfa08e0676265b3dd13e7b5131fa3094690f3e0975e3f98b90ad871184edd0f9efe31687b96ab634db28ae5058dca776f23fe0a807d5082

Score
10/10
hiveratratstealer

Malware Config

Targets

    • Target

      528f620f2cd3e22ce81c119a51801527a0ca2a1e5f3c05cf31591a28858359c4

    • Size

      955KB

    • MD5

      38c0511fa37c2f89a7a64f98065fc8a5

    • SHA1

      e279a64626c4819727390916993a679ce22ab183

    • SHA256

      528f620f2cd3e22ce81c119a51801527a0ca2a1e5f3c05cf31591a28858359c4

    • SHA512

      38e254745b5843b1edfa08e0676265b3dd13e7b5131fa3094690f3e0975e3f98b90ad871184edd0f9efe31687b96ab634db28ae5058dca776f23fe0a807d5082

    Score
    10/10
    hiveratratstealer

    • HiveRAT

      HiveRAT is an improved version of FirebirdRAT with various capabilities.

      ratstealerhiverat

    • HiveRAT Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks