Overview

overview

10

Static

static

d44651217b...7d.exe

windows7_x64

d44651217b...7d.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d44651217b87d290e2be6c004e8732817bf1d3d61043a93b25e1130ab7a56c7d

  • Size

    303KB

  • Sample

    220415-llj5eaagg5

  • MD5

    44738f6a68e89ead0109704208059b64

  • SHA1

    18119563ec62b034e81d9a315dfbc17bf5e682c8

  • SHA256

    d44651217b87d290e2be6c004e8732817bf1d3d61043a93b25e1130ab7a56c7d

  • SHA512

    59c78756389231e13f138e159464e2a859b16e4558af06f132a394fa162c4cb5b04ff94fd77d4ebf08623cbec9c7f16b1583df842b5e37729a4cceb0d7715eb2

Score
10/10
hiveratratstealer

Malware Config

Targets

    • Target

      d44651217b87d290e2be6c004e8732817bf1d3d61043a93b25e1130ab7a56c7d

    • Size

      303KB

    • MD5

      44738f6a68e89ead0109704208059b64

    • SHA1

      18119563ec62b034e81d9a315dfbc17bf5e682c8

    • SHA256

      d44651217b87d290e2be6c004e8732817bf1d3d61043a93b25e1130ab7a56c7d

    • SHA512

      59c78756389231e13f138e159464e2a859b16e4558af06f132a394fa162c4cb5b04ff94fd77d4ebf08623cbec9c7f16b1583df842b5e37729a4cceb0d7715eb2

    Score
    10/10
    hiveratratstealer

    • HiveRAT

      HiveRAT is an improved version of FirebirdRAT with various capabilities.

      ratstealerhiverat

    • HiveRAT Payload

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks