Overview

overview

10

Static

static

983307d0b1...1c.exe

windows7_x64

10

983307d0b1...1c.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    983307d0b15ee7e2bf5551873f5dc7dd486951263de813c7beed55ab726ef91c

  • Size

    355KB

  • Sample

    220329-wyfmvshee3

  • MD5

    2f0e24e82f7c70b3c698af44d4e1985d

  • SHA1

    d82af75bed79db528eed3520af0b79bb9476deec

  • SHA256

    983307d0b15ee7e2bf5551873f5dc7dd486951263de813c7beed55ab726ef91c

  • SHA512

    d1e17b54773b8abbd6a1c713f25c96436643b7059c2fc1f3bd2976daffbaca719df066279659e7340bedf57fa29a626da753f937bf3022c7f9380547396bc1cb

Score
10/10
hiveratratstealer

Malware Config

Targets

    • Target

      983307d0b15ee7e2bf5551873f5dc7dd486951263de813c7beed55ab726ef91c

    • Size

      355KB

    • MD5

      2f0e24e82f7c70b3c698af44d4e1985d

    • SHA1

      d82af75bed79db528eed3520af0b79bb9476deec

    • SHA256

      983307d0b15ee7e2bf5551873f5dc7dd486951263de813c7beed55ab726ef91c

    • SHA512

      d1e17b54773b8abbd6a1c713f25c96436643b7059c2fc1f3bd2976daffbaca719df066279659e7340bedf57fa29a626da753f937bf3022c7f9380547396bc1cb

    Score
    10/10
    hiveratratstealer

    • HiveRAT

      HiveRAT is an improved version of FirebirdRAT with various capabilities.

      ratstealerhiverat

    • HiveRAT Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks