General

  • Target

    126245196.exe

  • Size

    7.5MB

  • Sample

    240220-tpkjcabb6t

  • MD5

    3a85aae7df3a8616dcb9695e86479df3

  • SHA1

    eb8dea4ac1bb318b8b64c1f8db8ab8faa074a538

  • SHA256

    74f936e94136506df018f0b0cb484af9d10d3400109c35581b838cc456cb00db

  • SHA512

    7668784a2e2651cfdb35e67ab94f8f39d2e4deb5c4c1d3e71f7ed70b6dfdc6f7fefdb24e08760a57663251f1ef5a8e3593b1e3bdffc3f21fc94e1226efbbad1e

  • SSDEEP

    98304:CWumlH6XBJOvJQODguF3DnRHVZK7PjfzFTG1QdpWR9YYTJymVKy+MQGZIi7ipeiI:CN+oGZDRFjPZeTlGlyJFQecRM7HNhS

Score
7/10

Malware Config

Targets

    • Target

      126245196.exe

    • Size

      7.5MB

    • MD5

      3a85aae7df3a8616dcb9695e86479df3

    • SHA1

      eb8dea4ac1bb318b8b64c1f8db8ab8faa074a538

    • SHA256

      74f936e94136506df018f0b0cb484af9d10d3400109c35581b838cc456cb00db

    • SHA512

      7668784a2e2651cfdb35e67ab94f8f39d2e4deb5c4c1d3e71f7ed70b6dfdc6f7fefdb24e08760a57663251f1ef5a8e3593b1e3bdffc3f21fc94e1226efbbad1e

    • SSDEEP

      98304:CWumlH6XBJOvJQODguF3DnRHVZK7PjfzFTG1QdpWR9YYTJymVKy+MQGZIi7ipeiI:CN+oGZDRFjPZeTlGlyJFQecRM7HNhS

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks