General

  • Target

    Run.exe

  • Size

    1.5MB

  • Sample

    221003-gwyckaagg6

  • MD5

    6c07fecf1196e2082e91c301fc0e4c1c

  • SHA1

    2587d0566128a20e595b8d73321e65d68881f83a

  • SHA256

    f1a9de13eedcdb288fdec025ad642154b1eedc2d5c57f093c7c6c1fe3f642e6e

  • SHA512

    c7688cef0ea909c6add1d23344c0917b6af076cecc1048880ea1eb9352e369c5c0804b2485048a3beeb46277002ecc5fff7831b1e17949b6100f4ac12dd4d110

  • SSDEEP

    24576:WUAk8Ci1J5U42DCi5hsDUQYkHKgT+yZWR+CvP0kdbIcIKC66oaX0QOpXlmMG:WpQe3UDC8u1HqgeRjPpE366o91FlN

Score
7/10

Malware Config

Targets

    • Target

      Run.exe

    • Size

      1.5MB

    • MD5

      6c07fecf1196e2082e91c301fc0e4c1c

    • SHA1

      2587d0566128a20e595b8d73321e65d68881f83a

    • SHA256

      f1a9de13eedcdb288fdec025ad642154b1eedc2d5c57f093c7c6c1fe3f642e6e

    • SHA512

      c7688cef0ea909c6add1d23344c0917b6af076cecc1048880ea1eb9352e369c5c0804b2485048a3beeb46277002ecc5fff7831b1e17949b6100f4ac12dd4d110

    • SSDEEP

      24576:WUAk8Ci1J5U42DCi5hsDUQYkHKgT+yZWR+CvP0kdbIcIKC66oaX0QOpXlmMG:WpQe3UDC8u1HqgeRjPpE366o91FlN

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks