Overview

overview

6

Static

static

3

ekra_macros.exe

windows10-2004-x64

6

Resubmissions

27-11-2023 21:23

231127-z8q35adb2t 6

27-11-2023 21:19

231127-z57xgada8y 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ekra_macros.exe

  • Size

    4.4MB

  • Sample

    231127-z8q35adb2t

  • MD5

    03311905849cc9005299921413d6a650

  • SHA1

    6b035c1e91c90ae792e125ce76c897fadc398338

  • SHA256

    b8e8c5a64121f108bbe393fda18d9c4fe9cca050ec0a4fc581cbd9d06e104bdc

  • SHA512

    2549340255e81de6069f800dc018c7e939664a8c4a6d90742de5e6bb24a5905988445201a23877e3465d3615565492659b4dc0d780ab31b155f4af44e74e0a91

  • SSDEEP

    98304:uCi4eP/tiJqYZhhk5zd0K4uScSdroJrnzsGXQdS4r:uCi4k/wAH5zdOcSlA0WQ7

Score
6/10

Malware Config

Targets

    • Target

      ekra_macros.exe

    • Size

      4.4MB

    • MD5

      03311905849cc9005299921413d6a650

    • SHA1

      6b035c1e91c90ae792e125ce76c897fadc398338

    • SHA256

      b8e8c5a64121f108bbe393fda18d9c4fe9cca050ec0a4fc581cbd9d06e104bdc

    • SHA512

      2549340255e81de6069f800dc018c7e939664a8c4a6d90742de5e6bb24a5905988445201a23877e3465d3615565492659b4dc0d780ab31b155f4af44e74e0a91

    • SSDEEP

      98304:uCi4eP/tiJqYZhhk5zd0K4uScSdroJrnzsGXQdS4r:uCi4k/wAH5zdOcSlA0WQ7

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks