Overview

overview

10

Static

static

10

d20a5986bc...44.exe

windows7-x64

8

d20a5986bc...44.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d20a5986bc03b195f49bb7b6f77b1b23da5584ef493db3caae21bcd4f622a144

  • Size

    1.3MB

  • Sample

    221127-m96tracd87

  • MD5

    4345c8537503b26aa878288ad91682b0

  • SHA1

    5341c1e49892cd2c89e787d0a7dbe892a4b9346e

  • SHA256

    d20a5986bc03b195f49bb7b6f77b1b23da5584ef493db3caae21bcd4f622a144

  • SHA512

    dc04dd2cdc148fcf44136d109d6e2b58503a5bb11d3e2e7e4300cdd9c39ebd3631667aac68a6374984b939efea400b750643cebeb08f015fc16141a34b58710a

  • SSDEEP

    24576:WFcPy6N0NKuMP/SwlJ2t+nFmWumdQTJEQkf0ydLRByZC:WZ+SoSWubJaBV0ZC

Score
10/10
blackmoon

Malware Config

Targets

    • Target

      d20a5986bc03b195f49bb7b6f77b1b23da5584ef493db3caae21bcd4f622a144

    • Size

      1.3MB

    • MD5

      4345c8537503b26aa878288ad91682b0

    • SHA1

      5341c1e49892cd2c89e787d0a7dbe892a4b9346e

    • SHA256

      d20a5986bc03b195f49bb7b6f77b1b23da5584ef493db3caae21bcd4f622a144

    • SHA512

      dc04dd2cdc148fcf44136d109d6e2b58503a5bb11d3e2e7e4300cdd9c39ebd3631667aac68a6374984b939efea400b750643cebeb08f015fc16141a34b58710a

    • SSDEEP

      24576:WFcPy6N0NKuMP/SwlJ2t+nFmWumdQTJEQkf0ydLRByZC:WZ+SoSWubJaBV0ZC

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks