General

  • Target

    MidnightCrack_v2.exe

  • Size

    4.2MB

  • Sample

    230802-tqgh3sfe52

  • MD5

    5c18a8d56ea0fd1e3b3a7b86933ab52b

  • SHA1

    8f80ccd3a5d5628d55cd1383e1b18b56d59fa93f

  • SHA256

    11140156a04a4202a5f341336deed53e47b26ccc464fcdcc2c96e3f2561f8a4f

  • SHA512

    afac01f99ffda7fe8170cf073e575b51c1791f3a7391313c3ef7f45cab519defe898954e570d28f9fc34a444f4cb9710940c364f41ae09944b48b89280571e79

  • SSDEEP

    98304:7eCsDmTaFNjjHP5SWsaTdP3AxPi72JvoVRRH6l9EaBGiDVnRwwzUs:7COaFZRSWsQPQJvCvHm9EVi9RXU

Score
10/10

Malware Config

Targets

    • Target

      MidnightCrack_v2.exe

    • Size

      4.2MB

    • MD5

      5c18a8d56ea0fd1e3b3a7b86933ab52b

    • SHA1

      8f80ccd3a5d5628d55cd1383e1b18b56d59fa93f

    • SHA256

      11140156a04a4202a5f341336deed53e47b26ccc464fcdcc2c96e3f2561f8a4f

    • SHA512

      afac01f99ffda7fe8170cf073e575b51c1791f3a7391313c3ef7f45cab519defe898954e570d28f9fc34a444f4cb9710940c364f41ae09944b48b89280571e79

    • SSDEEP

      98304:7eCsDmTaFNjjHP5SWsaTdP3AxPi72JvoVRRH6l9EaBGiDVnRwwzUs:7COaFZRSWsQPQJvCvHm9EVi9RXU

    Score
    10/10
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks