General

  • Target

    2005255adc779060da9d6e688fd1c46b

  • Size

    691KB

  • Sample

    231230-3gcyzadack

  • MD5

    2005255adc779060da9d6e688fd1c46b

  • SHA1

    0a7044118f79faef18f3b7d59ec0f8e105d0a0b0

  • SHA256

    b9ba46f955253c8ff4ef45a383d2f841df06427b6ed3ef5d2ac8ad95fd08c4cd

  • SHA512

    a184614fc6e36a3b62b8f545bec3dc4d91f7f5727b33b21f583a9375f384633f2f7fde8066d61866b975135dfb6ac70f062c0ca77f8abca13a2ba1d3551ccbb0

  • SSDEEP

    12288:1T9z1toEPUArThVieqnlnlb8uYhkOH7v7ENFo9T/bKiG6hsS4TLzKO:1xzIEPUArqtlb853Dj2iG6hOLzK

Score
7/10

Malware Config

Targets

    • Target

      2005255adc779060da9d6e688fd1c46b

    • Size

      691KB

    • MD5

      2005255adc779060da9d6e688fd1c46b

    • SHA1

      0a7044118f79faef18f3b7d59ec0f8e105d0a0b0

    • SHA256

      b9ba46f955253c8ff4ef45a383d2f841df06427b6ed3ef5d2ac8ad95fd08c4cd

    • SHA512

      a184614fc6e36a3b62b8f545bec3dc4d91f7f5727b33b21f583a9375f384633f2f7fde8066d61866b975135dfb6ac70f062c0ca77f8abca13a2ba1d3551ccbb0

    • SSDEEP

      12288:1T9z1toEPUArThVieqnlnlb8uYhkOH7v7ENFo9T/bKiG6hsS4TLzKO:1xzIEPUArqtlb853Dj2iG6hOLzK

    Score
    7/10
    • Executes dropped EXE

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks