General

  • Target

    56785bba1e00883c355dcfa70ac8853d39b026a603eca7a5464254a3c3624099

  • Size

    72KB

  • Sample

    220725-dn1k6scdhn

  • MD5

    3f7ad33f4d00b444ac42dbaa58d8c2ee

  • SHA1

    2c1e653d7e3f026f3801bcef183981dac1db8393

  • SHA256

    56785bba1e00883c355dcfa70ac8853d39b026a603eca7a5464254a3c3624099

  • SHA512

    c292fc18f6be09ba3c24028a3726d99d8f57a9592a2a6d4dd80f03a18e2ae5d16da099cd88c132921cee9594371e8cf853a955566b245a7f38ff15593ab5a924

Score
10/10

Malware Config

Targets

    • Target

      56785bba1e00883c355dcfa70ac8853d39b026a603eca7a5464254a3c3624099

    • Size

      72KB

    • MD5

      3f7ad33f4d00b444ac42dbaa58d8c2ee

    • SHA1

      2c1e653d7e3f026f3801bcef183981dac1db8393

    • SHA256

      56785bba1e00883c355dcfa70ac8853d39b026a603eca7a5464254a3c3624099

    • SHA512

      c292fc18f6be09ba3c24028a3726d99d8f57a9592a2a6d4dd80f03a18e2ae5d16da099cd88c132921cee9594371e8cf853a955566b245a7f38ff15593ab5a924

    Score
    10/10
    • suricata: ET MALWARE Possible Kelihos.F EXE Download Common Structure

      suricata: ET MALWARE Possible Kelihos.F EXE Download Common Structure

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks