Overview

overview

6

Static

static

1

senex_woofer.exe

windows7-x64

6

senex_woofer.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    senex_woofer.exe

  • Size

    634KB

  • Sample

    230411-t62h7afc8w

  • MD5

    911471910c3f25d2880865ec9d26f079

  • SHA1

    e24178f42a17e3a9746a039ab69ee3530481adc2

  • SHA256

    903c5f1a1f349335849499426f18f75d7fad5b3484a4c74deac26b15248c0693

  • SHA512

    0883443da7df2b3ee813bd6858db41c3fd60fb3a6551bafaf3984b2af2b6dff1fcf9719add0b5cb717e7b3cd46e1e0688cca22bf46daaa72a34a9a9ca06445ad

  • SSDEEP

    12288:IqLMS0TFtT8n77rodRfyyufQCLbvTBErz+Ry9V:IqLMS0TFtT8kdRIfpbvT2rhH

Score
6/10

Malware Config

Targets

    • Target

      senex_woofer.exe

    • Size

      634KB

    • MD5

      911471910c3f25d2880865ec9d26f079

    • SHA1

      e24178f42a17e3a9746a039ab69ee3530481adc2

    • SHA256

      903c5f1a1f349335849499426f18f75d7fad5b3484a4c74deac26b15248c0693

    • SHA512

      0883443da7df2b3ee813bd6858db41c3fd60fb3a6551bafaf3984b2af2b6dff1fcf9719add0b5cb717e7b3cd46e1e0688cca22bf46daaa72a34a9a9ca06445ad

    • SSDEEP

      12288:IqLMS0TFtT8n77rodRfyyufQCLbvTBErz+Ry9V:IqLMS0TFtT8kdRIfpbvT2rhH

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks