General

  • Target

    ef66b18f33f616b3b48c27e1911e833d5b847a4ae16d3a7dd119622e522a8aea

  • Size

    1.5MB

  • Sample

    221029-egrkcsbben

  • MD5

    fd78708910a9b4dea60ac2bda5cf52d2

  • SHA1

    17b2f6a68917fd55cdd9ddc532df9f18d3d93d83

  • SHA256

    ef66b18f33f616b3b48c27e1911e833d5b847a4ae16d3a7dd119622e522a8aea

  • SHA512

    71f92d4e5c50c88a5a3e7ec065991ea6d19cbd51e88efe1239dfd6463e372c22cbfbdf7d164006dc9eb358b5565e71b8d1603c2543e650bb940e3ecc3fa1c9ee

  • SSDEEP

    49152:rcM0tiI9zlTsA8uzTbbyVD7eVcPfdXHMq:wLii6AV/6VD79lHMq

Score
8/10
upx

Malware Config

Targets

    • Target

      ef66b18f33f616b3b48c27e1911e833d5b847a4ae16d3a7dd119622e522a8aea

    • Size

      1.5MB

    • MD5

      fd78708910a9b4dea60ac2bda5cf52d2

    • SHA1

      17b2f6a68917fd55cdd9ddc532df9f18d3d93d83

    • SHA256

      ef66b18f33f616b3b48c27e1911e833d5b847a4ae16d3a7dd119622e522a8aea

    • SHA512

      71f92d4e5c50c88a5a3e7ec065991ea6d19cbd51e88efe1239dfd6463e372c22cbfbdf7d164006dc9eb358b5565e71b8d1603c2543e650bb940e3ecc3fa1c9ee

    • SSDEEP

      49152:rcM0tiI9zlTsA8uzTbbyVD7eVcPfdXHMq:wLii6AV/6VD79lHMq

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks