Overview

overview

10

Static

static

1

ab425bf1f9...8a.exe

windows7-x64

3

ab425bf1f9...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab425bf1f9965f054ee0400007e4c28a

  • Size

    1.1MB

  • Sample

    240228-hh6bpadf21

  • MD5

    ab425bf1f9965f054ee0400007e4c28a

  • SHA1

    10c79c14e1e050ff2fb14d4d3470b763a7c2c541

  • SHA256

    e529d736eb5d661cbdc62f88f50461d736686bb2aa31fb28a5412d59e4c81bc4

  • SHA512

    cc6159fe281aab2a5c9bbaa91feb4844e630bd37434bd96a7811155a7ebbb9ef801c959b3bf874b9275d7dba3a97f41e0804040fa77bedc835d4e12c0e0d625e

  • SSDEEP

    12288:2oKboJfbmpMC3y50ysABr54bCRPZr5ZU0ZG+wksmB4C:2oKAfipMCC2dABtRRNnwFC

Score
10/10
hiveratratstealer

Malware Config

Targets

    • Target

      ab425bf1f9965f054ee0400007e4c28a

    • Size

      1.1MB

    • MD5

      ab425bf1f9965f054ee0400007e4c28a

    • SHA1

      10c79c14e1e050ff2fb14d4d3470b763a7c2c541

    • SHA256

      e529d736eb5d661cbdc62f88f50461d736686bb2aa31fb28a5412d59e4c81bc4

    • SHA512

      cc6159fe281aab2a5c9bbaa91feb4844e630bd37434bd96a7811155a7ebbb9ef801c959b3bf874b9275d7dba3a97f41e0804040fa77bedc835d4e12c0e0d625e

    • SSDEEP

      12288:2oKboJfbmpMC3y50ysABr54bCRPZr5ZU0ZG+wksmB4C:2oKAfipMCC2dABtRRNnwFC

    Score
    10/10
    hiveratratstealer

    • HiveRAT

      HiveRAT is an improved version of FirebirdRAT with various capabilities.

      ratstealerhiverat

    • HiveRAT payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks