Overview

overview

10

Static

static

fcff8f4e1c...c9.exe

windows7_x64

10

fcff8f4e1c...c9.exe

windows10-2004_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcff8f4e1c8655e2b4c1239ac0947a7a56eca16dcec9c2ad58b791b726eb27c9

  • Size

    1.0MB

  • Sample

    220415-kw98xahde6

  • MD5

    c155dbf53ae3d27c885344e67c53f4a9

  • SHA1

    f33018f1c97f8e45b3d18590fa452484cbd33c4e

  • SHA256

    fcff8f4e1c8655e2b4c1239ac0947a7a56eca16dcec9c2ad58b791b726eb27c9

  • SHA512

    bd551fdc67db54ce5a894da69cf1a5aa78cb7aaa27d04851f66390178d0f41e3a682770542822df47cd581f19d2d3d586c0209139e3d57494200d69fa8772dcf

Score
10/10
hiveratratstealer

Malware Config

Targets

    • Target

      fcff8f4e1c8655e2b4c1239ac0947a7a56eca16dcec9c2ad58b791b726eb27c9

    • Size

      1.0MB

    • MD5

      c155dbf53ae3d27c885344e67c53f4a9

    • SHA1

      f33018f1c97f8e45b3d18590fa452484cbd33c4e

    • SHA256

      fcff8f4e1c8655e2b4c1239ac0947a7a56eca16dcec9c2ad58b791b726eb27c9

    • SHA512

      bd551fdc67db54ce5a894da69cf1a5aa78cb7aaa27d04851f66390178d0f41e3a682770542822df47cd581f19d2d3d586c0209139e3d57494200d69fa8772dcf

    Score
    10/10
    hiveratratstealer

    • HiveRAT

      HiveRAT is an improved version of FirebirdRAT with various capabilities.

      ratstealerhiverat

    • HiveRAT Payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks