Overview

overview

6

Static

static

3

TMNT-OOFS+....0.exe

windows7-x64

5

TMNT-OOFS+....0.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    464206fced1ed735aa34367bb59acd9a

  • Size

    2.1MB

  • Sample

    240106-pyr8bshga4

  • MD5

    464206fced1ed735aa34367bb59acd9a

  • SHA1

    14c3a4ce18e442f0c0d77fff0992479c1b11865c

  • SHA256

    5b321c1c5a187dbc594a15cc8e95d22dd8a217bf648348313f01b594cd0ec4cd

  • SHA512

    2f3bb119bf50a6902eae592bd91d9beebd4e39b5789121a49596c6f4dd8c78453221360f5a70f73fd48317c6b43c2c399d67382d8629f9310823b13238f52a58

  • SSDEEP

    49152:qzq1N7IeXNgSB/eceCYxbcoj1y7c6OV5VVDr4DIaEWT7YfVtN:/N7IAn2cerb10IPBd8IfHN

Score
6/10
discovery

Malware Config

Targets

    • Target

      TMNT-OOFS+9Tr-LNG_v1.0.exe

    • Size

      2.1MB

    • MD5

      29718d84abf3d0cb9a7a8f12fa712356

    • SHA1

      c5daeef92290150eada7cfc48eb3c664de1e5a59

    • SHA256

      c60996f42ef532853e011cbfec21b43b42f873204482aec7938c0fb059b0dfaf

    • SHA512

      294f046300905cecc9613b74c9b782d7c15035b6d73d7a9ede9365c5cdec12d53268881f1512361612ac3534fa2607e3e1d40618bb89ff37f493e6a50dd51d45

    • SSDEEP

      49152:CxXCTssPsU7ln8m32PYsTwIQBEt+V5E4BVvC7CsbHkGuzYl:mXGtyJYmQBgyS4BV67CsbHWzO

    Score
    6/10
    discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks