Overview

overview

10

Static

static

3

5a1b05b7e6...88.exe

windows7-x64

7

5a1b05b7e6...88.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a1b05b7e60453269492e5335393c088

  • Size

    7.0MB

  • Sample

    231222-dwh14acda9

  • MD5

    5a1b05b7e60453269492e5335393c088

  • SHA1

    b8a3404443d451cbd894fd172f1bbf7396d89096

  • SHA256

    d24ed90318e97360d0f96928df21c373276f27a16098d9afd874478cfc3c670b

  • SHA512

    d010c8460366e321220ef70b18309346cc522b0cea5460faf0f4bd52354a2c706e109435d46874d088d7b2a5aa902fc0d6613a03e113deee84e595f89569dd78

  • SSDEEP

    196608:qzx7KRUUICteEroXxWVfEqlbkkwR7VTE+ZFmjIr5Uz0L:kwUUInEroXgfEqirRRo+ZIjItUI

Score
10/10
pyinstaller

Malware Config

Extracted

Credentials

  • Protocol:     ftp
  • Host:
    files.000webhost.com
  • Port:
    21
  • Username:
    cudosToGriffindor

Targets

    • Target

      5a1b05b7e60453269492e5335393c088

    • Size

      7.0MB

    • MD5

      5a1b05b7e60453269492e5335393c088

    • SHA1

      b8a3404443d451cbd894fd172f1bbf7396d89096

    • SHA256

      d24ed90318e97360d0f96928df21c373276f27a16098d9afd874478cfc3c670b

    • SHA512

      d010c8460366e321220ef70b18309346cc522b0cea5460faf0f4bd52354a2c706e109435d46874d088d7b2a5aa902fc0d6613a03e113deee84e595f89569dd78

    • SSDEEP

      196608:qzx7KRUUICteEroXxWVfEqlbkkwR7VTE+ZFmjIr5Uz0L:kwUUInEroXgfEqirRRo+ZIjItUI

    Score
    10/10

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks