General

  • Target

    d2d759c864d633e424399a054e8aa25cb1c046a7b1ddae61ff6e8a9327d5b5bd

  • Size

    236KB

  • Sample

    221124-xfd7racd76

  • MD5

    01cf4d9246bd1d82e932d41a3cc28fa3

  • SHA1

    299821d91cb1e6330d5d81533e5d9e7a3cb6a44f

  • SHA256

    d2d759c864d633e424399a054e8aa25cb1c046a7b1ddae61ff6e8a9327d5b5bd

  • SHA512

    f6bb2807f1addfade4094e063d125cab0d1c7a3f80fa75beb4b7a059c7578b75d2d97e13d1e79a5669ed2c95a6c3f38480a3789e79d87bf1bc1c2a7492521f12

  • SSDEEP

    3072:knxe4DphzvR/y5DBP4pKF44Tg6ByNKhCvwOdQ7ae3JmIWwlLygRjZqMNfQ:knnwDpuMuySKWoQIdB5vY

Score
9/10

Malware Config

Targets

    • Target

      d2d759c864d633e424399a054e8aa25cb1c046a7b1ddae61ff6e8a9327d5b5bd

    • Size

      236KB

    • MD5

      01cf4d9246bd1d82e932d41a3cc28fa3

    • SHA1

      299821d91cb1e6330d5d81533e5d9e7a3cb6a44f

    • SHA256

      d2d759c864d633e424399a054e8aa25cb1c046a7b1ddae61ff6e8a9327d5b5bd

    • SHA512

      f6bb2807f1addfade4094e063d125cab0d1c7a3f80fa75beb4b7a059c7578b75d2d97e13d1e79a5669ed2c95a6c3f38480a3789e79d87bf1bc1c2a7492521f12

    • SSDEEP

      3072:knxe4DphzvR/y5DBP4pKF44Tg6ByNKhCvwOdQ7ae3JmIWwlLygRjZqMNfQ:knnwDpuMuySKWoQIdB5vY

    Score
    9/10
    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks