Resubmissions

24/11/2023, 15:10

231124-skd1bsda5x 7

24/11/2023, 14:56

231124-sbfgssch41 7

General

  • Target

    ocr (3).png

  • Size

    315KB

  • Sample

    231124-skd1bsda5x

  • MD5

    77624b71dfea012975b9e37dcf71b35b

  • SHA1

    574c7c0a5fbf31fb017f801bb620b21d59d9e88f

  • SHA256

    bb152c699a74fe4d135a24ba52f7a03469230856451714e342ff20b8e6214d57

  • SHA512

    bab42711764c9bc2ed634f6208d18ac6c0a324403170dbfcd15e59f053a6361b2d3a8614515aaa396f5e43c424eaa15efe3dbe4c94922d5f996ea8585c5b18db

  • SSDEEP

    6144:KS3cHmMsjjHyjwytqd+qwITYW2MNzJ1ahVOfHOl3ou/Hnb:XcLcWEpd2dWRUwHOdZ/7

Score
7/10

Malware Config

Targets

    • Target

      ocr (3).png

    • Size

      315KB

    • MD5

      77624b71dfea012975b9e37dcf71b35b

    • SHA1

      574c7c0a5fbf31fb017f801bb620b21d59d9e88f

    • SHA256

      bb152c699a74fe4d135a24ba52f7a03469230856451714e342ff20b8e6214d57

    • SHA512

      bab42711764c9bc2ed634f6208d18ac6c0a324403170dbfcd15e59f053a6361b2d3a8614515aaa396f5e43c424eaa15efe3dbe4c94922d5f996ea8585c5b18db

    • SSDEEP

      6144:KS3cHmMsjjHyjwytqd+qwITYW2MNzJ1ahVOfHOl3ou/Hnb:XcLcWEpd2dWRUwHOdZ/7

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks