Overview

overview

7

Static

static

3

Notr.exe

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Notr.exe

  • Size

    6.8MB

  • Sample

    220928-vt18bshgel

  • MD5

    a4beb4dab8d129fdcd48575a363bc59c

  • SHA1

    97297ce8b8c2d52c30ed8ffe73e85956fc070224

  • SHA256

    b22b974d0dfcca6cc2e86132d44fb50bc0b3a09e9de49b4c8b108905819be0f3

  • SHA512

    c95ee289517eba3905cf4df9520dfc10c6f8fa6bb56326bd8142b82a4ebfd3caaef98ce8e80419fdffcb24e87714192495148a9cb6db85a4ce93026bbc467ca8

  • SSDEEP

    196608:gJOcjsjOCsXDjDyfQydJolpPgToa10/IUFOnJdwJJU:yFsjOCEDXMJ83a10QUs2J

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      Notr.exe

    • Size

      6.8MB

    • MD5

      a4beb4dab8d129fdcd48575a363bc59c

    • SHA1

      97297ce8b8c2d52c30ed8ffe73e85956fc070224

    • SHA256

      b22b974d0dfcca6cc2e86132d44fb50bc0b3a09e9de49b4c8b108905819be0f3

    • SHA512

      c95ee289517eba3905cf4df9520dfc10c6f8fa6bb56326bd8142b82a4ebfd3caaef98ce8e80419fdffcb24e87714192495148a9cb6db85a4ce93026bbc467ca8

    • SSDEEP

      196608:gJOcjsjOCsXDjDyfQydJolpPgToa10/IUFOnJdwJJU:yFsjOCEDXMJ83a10QUs2J

    Score
    7/10

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks