Overview

overview

7

Static

static

3

PlayStation.exe

windows7-x64

7

PlayStation.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PlayStation.exe

  • Size

    4.8MB

  • Sample

    230518-cnfekahd42

  • MD5

    fb049d70b56c8edad8246e41546db8bd

  • SHA1

    f02c296d7bdf0042ff659c51aa8148703c430eb6

  • SHA256

    d0421b25e316db606840821ea866c401ea86c74351b2389d94d3e4bffd8490cd

  • SHA512

    5a47f8df412703647692c6b0b3b17a58d5a94662ee974f3bc745674b1fa5940ca3e7a0be286746bc0b770b8644aa0631dcdde7711dedbc44142971958a1e5b22

  • SSDEEP

    98304:cEbcGOIs0z87c8NykySN5wI+cu23ksxlSZfmxgNXxcl7QO+P/I0Fy59XM7aQH7c:cJIsG87c8NykvP3bxlSZkgNXxNP/Ijxp

Score
7/10
agilenet

Malware Config

Targets

    • Target

      PlayStation.exe

    • Size

      4.8MB

    • MD5

      fb049d70b56c8edad8246e41546db8bd

    • SHA1

      f02c296d7bdf0042ff659c51aa8148703c430eb6

    • SHA256

      d0421b25e316db606840821ea866c401ea86c74351b2389d94d3e4bffd8490cd

    • SHA512

      5a47f8df412703647692c6b0b3b17a58d5a94662ee974f3bc745674b1fa5940ca3e7a0be286746bc0b770b8644aa0631dcdde7711dedbc44142971958a1e5b22

    • SSDEEP

      98304:cEbcGOIs0z87c8NykySN5wI+cu23ksxlSZfmxgNXxcl7QO+P/I0Fy59XM7aQH7c:cJIsG87c8NykvP3bxlSZkgNXxNP/Ijxp

    Score
    7/10
    agilenet

    • Deletes itself

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks