a06964f9c51343778b899fb4bf95e2fdd9148d441f0f2a913275b7f82a0e5f38 | Triage

Sharing

General

Target

loader.exe
Size

20.6MB
Sample

230808-w1wrvsfa56
MD5

50596b0be867e03f1c1b05d7673e02c6
SHA1

ef301798914bc14a88ece60ff56d060b39bc08a9
SHA256

a06964f9c51343778b899fb4bf95e2fdd9148d441f0f2a913275b7f82a0e5f38
SHA512

ad35de8a163fd7ee23ab189f65816d65f58d22f7f8412b10588610bb737f1e079febaf27cd1f2e833cf823bf3f8c44ca57eafaff17f46378664560125dc5842e
SSDEEP

393216:UX06s7Dy0CBEdMngCaBAT9sJUskgIUto6fT6LF:UX06s7DXCKdaaBAJ+T2Ao6+

Score

5^/10

android

Malware Config

Targets

- Target
  
  loader.exe
- Size
  
  20.6MB
- MD5
  
  50596b0be867e03f1c1b05d7673e02c6
- SHA1
  
  ef301798914bc14a88ece60ff56d060b39bc08a9
- SHA256
  
  a06964f9c51343778b899fb4bf95e2fdd9148d441f0f2a913275b7f82a0e5f38
- SHA512
  
  ad35de8a163fd7ee23ab189f65816d65f58d22f7f8412b10588610bb737f1e079febaf27cd1f2e833cf823bf3f8c44ca57eafaff17f46378664560125dc5842e
- SSDEEP
  
  393216:UX06s7Dy0CBEdMngCaBAT9sJUskgIUto6fT6LF:UX06s7DXCKdaaBAJ+T2Ao6+
Score

5^/10
- Drops file in System32 directory
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3