General
-
Target
asd.rar
-
Size
54.2MB
-
Sample
230902-krc3lsbh93
-
MD5
b720bd455b680369f1785c6ef5c740e4
-
SHA1
c4bdc054e8a5f4397769abf353f50ee28643f0df
-
SHA256
8cf55ce3290810687fa5521e8b01768838f57222e0badd3c72749457845893d5
-
SHA512
7265ebd4d3e9ab2ecdc1297a65dfac1ea1ba0d6ef40c36be482d8009bb6921e1b610476c804d753b55249a883754924a302359ef929a61a956ca3987b299fa64
-
SSDEEP
1572864:j2FG33im5JizaCAismgyWMruEet1pzMg/uRYVzbucpd:6InHMsmgwQPpz7ifcj
Behavioral task
behavioral1
Sample
server/lean_server.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
server/lean_server.exe
Resource
win10v2004-20230831-en
Malware Config
Targets
-
-
Target
server/lean_server.exe
-
Size
41.0MB
-
MD5
305d76c22e15b1ec733eca17225dd488
-
SHA1
12a32d9532631a87e7f219eed4007120ac2dfbb5
-
SHA256
94dc5e4a5ba2934f4074968a98819dae277d122e1a34929c9e22ad335fe976b2
-
SHA512
7a38135c854b663be59a361e846f1613482e410aebb3e27eafdc1c2f834507319d9022a05f0b9b9dfaebf61a5fe7602a90967238e76bd40f423b91c0b2a823a0
-
SSDEEP
786432:V6otGHf/yVmNVMHwJ3QhaBaaREMKQpQBPbwYSu4oX18frN/77A4AxEEoe/z5AZ/p:V3e/yVEVMSqEHEMKfBuu4oX1qN/7ZwB8
Score7/10-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-