General

  • Target

    566b27b2e37ebeeb1daa5cfef58a5504964738380c364a46c4fa27adbbd2d3c2

  • Size

    80KB

  • Sample

    220725-dz3vnsdaaj

  • MD5

    18da837214548fa02d79daf0b0f0b169

  • SHA1

    16eee90a7cf6987f31fe2ec7235f7623db5b2c83

  • SHA256

    566b27b2e37ebeeb1daa5cfef58a5504964738380c364a46c4fa27adbbd2d3c2

  • SHA512

    aa28f748cda74d8b7fc9b82b02eb8f66a1479242cd75cb39b621b8955a3aad2a0734c6709055e1b736fa7cf8a6ab8d417a97a8e35c7744181546e944fbb9c4da

Score
10/10

Malware Config

Targets

    • Target

      566b27b2e37ebeeb1daa5cfef58a5504964738380c364a46c4fa27adbbd2d3c2

    • Size

      80KB

    • MD5

      18da837214548fa02d79daf0b0f0b169

    • SHA1

      16eee90a7cf6987f31fe2ec7235f7623db5b2c83

    • SHA256

      566b27b2e37ebeeb1daa5cfef58a5504964738380c364a46c4fa27adbbd2d3c2

    • SHA512

      aa28f748cda74d8b7fc9b82b02eb8f66a1479242cd75cb39b621b8955a3aad2a0734c6709055e1b736fa7cf8a6ab8d417a97a8e35c7744181546e944fbb9c4da

    Score
    10/10
    • suricata: ET MALWARE Possible Kelihos.F EXE Download Common Structure

      suricata: ET MALWARE Possible Kelihos.F EXE Download Common Structure

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks