Overview

overview

8

Static

static

1

ae26503c05...98.exe

windows7-x64

8

ae26503c05...98.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae26503c0551ca64bbdafcd0c8985820fad1fda85a8d68bb9f6f68a31d4d9c98

  • Size

    2.5MB

  • Sample

    221129-npb93shc4x

  • MD5

    4cdf9e5ee338c74249ea78c565ef37f5

  • SHA1

    d855d45fed826b8c4b5ecd3a9a3cb588a5a7eefd

  • SHA256

    ae26503c0551ca64bbdafcd0c8985820fad1fda85a8d68bb9f6f68a31d4d9c98

  • SHA512

    3e8c92807bd12403efc8b8fb6b4df2b4ce7986dbcf33ac74210631a80b8c3c693d17d086af6f27bed1a09d060689f442601b25a1287ab2a003faac49420b1f1b

  • SSDEEP

    49152:4u97UeUw7mQqCkLwaFAx8Sd6HQ1UB85aWgjjX64/ued+2xKSjBSOG:/dUeUCxq4aqx8Sd6w1US5Qrf/uEDxKES

Score
8/10
discovery

Malware Config

Targets

    • Target

      ae26503c0551ca64bbdafcd0c8985820fad1fda85a8d68bb9f6f68a31d4d9c98

    • Size

      2.5MB

    • MD5

      4cdf9e5ee338c74249ea78c565ef37f5

    • SHA1

      d855d45fed826b8c4b5ecd3a9a3cb588a5a7eefd

    • SHA256

      ae26503c0551ca64bbdafcd0c8985820fad1fda85a8d68bb9f6f68a31d4d9c98

    • SHA512

      3e8c92807bd12403efc8b8fb6b4df2b4ce7986dbcf33ac74210631a80b8c3c693d17d086af6f27bed1a09d060689f442601b25a1287ab2a003faac49420b1f1b

    • SSDEEP

      49152:4u97UeUw7mQqCkLwaFAx8Sd6HQ1UB85aWgjjX64/ued+2xKSjBSOG:/dUeUCxq4aqx8Sd6w1US5Qrf/uEDxKES

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks