Overview

overview

8

Static

static

main-file-...up.exe

windows7-x64

1

main-file-...up.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    main-file-setup.zip

  • Size

    866KB

  • Sample

    221220-reffjahg77

  • MD5

    5799f4895a9885855cae26c1feb6c5c2

  • SHA1

    7f7876a31d7f533f1b496375ff95ffe28f58570e

  • SHA256

    1dff12ee6b61c31e2a9f5364f4c6bdbe8639cec3343ab4ca0ee7b43ce3cf0fd5

  • SHA512

    21141ca4aee5806286cebd878b7f9e36c9d6058937f8f8aacc09dc536fa91a90dc6271c206fb906b094dd1929dbb55847f4657aabb8fb694fdf77caf8270266a

  • SSDEEP

    24576:hr5iE3boM6kLtfm3whhhOMe5drtEp6DEAkhVQX:hc78fJ8ap0khM

Score
8/10

Malware Config

Targets

    • Target

      main-file-setup/main-file-setup.exe

    • Size

      550.0MB

    • MD5

      ca89705a231aabedd38eae9c3001db3b

    • SHA1

      a1e6c57986789a8cbc6c4d54ba3382dafef30f0b

    • SHA256

      4196cb4e7ce6c3de44472fc67075ac56b9f5971f8fcf706e06edeca3a94e88d9

    • SHA512

      6791283bb8f4704446df861d1e8c5102cd27c3e483326bc5c2231bd541c8344c9ebde96e3b921dcf27b918f58a312ef8b466e3f67875580f8689a6335db83749

    • SSDEEP

      6144:sDSyydUgNDebfYDZWbg5c53u+cEIJ5nz59/cqok+trxLRsd9FtkEWU98ek6Br80X:LVN6bggSYqYthI/NLH3Sn2vLTl0A

    Score
    8/10

    • Blocklisted process makes network request

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks