General

  • Target

    add306fcfce303f761242eab1638db69a921576d1a0d45014d7402d12980087c

  • Size

    4.1MB

  • Sample

    220913-2tl7qsggf8

  • MD5

    d0b657207164df01528ffb1851846b35

  • SHA1

    0d5041c2a203d0984c71645e24696769aaaa768e

  • SHA256

    add306fcfce303f761242eab1638db69a921576d1a0d45014d7402d12980087c

  • SHA512

    b9d80c1d7ac59f6c73ca056213fbd92d03d7ffa15756a76d5c7976a191599d80e45bcaf4b6b415bacd47c216535f6ec9ab2288d9dbcaad82685b3be6405d049d

  • SSDEEP

    98304:NAlWdUHfseXpq5HXf9TIXgFzcSTBb2Bv+4/sv3PnPonY56AR4KDhkszsw:mcS/YhP9TIXUHBqZ7k/PgyZRp9kvw

Score
10/10

Malware Config

Targets

    • Target

      add306fcfce303f761242eab1638db69a921576d1a0d45014d7402d12980087c

    • Size

      4.1MB

    • MD5

      d0b657207164df01528ffb1851846b35

    • SHA1

      0d5041c2a203d0984c71645e24696769aaaa768e

    • SHA256

      add306fcfce303f761242eab1638db69a921576d1a0d45014d7402d12980087c

    • SHA512

      b9d80c1d7ac59f6c73ca056213fbd92d03d7ffa15756a76d5c7976a191599d80e45bcaf4b6b415bacd47c216535f6ec9ab2288d9dbcaad82685b3be6405d049d

    • SSDEEP

      98304:NAlWdUHfseXpq5HXf9TIXgFzcSTBb2Bv+4/sv3PnPonY56AR4KDhkszsw:mcS/YhP9TIXUHBqZ7k/PgyZRp9kvw

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Modifies Windows Firewall

MITRE ATT&CK Enterprise v6

Tasks