940a34458e274e227d1e3ab0630f494f6fbe65624561d45eb8d79e4fc3f91023

General

Target
940a34458e274e227d1e3ab0630f494f6fbe65624561d45eb8d79e4fc3f91023.exe
Size 647KB
Sample240404-ngjzysea96
SHA256 940a34458e274e227d1e3ab0630f494f6fbe65624561d45eb8d79e4fc3f91023
MD5 0d66a9a25e877722a0040f235d5d5487
SHA1 a17817b44856cc038f5808738ce9ebebbe696f44
SHA512 d24a81367e579437a477285591b3ae1da56e6111b21275201b62c0358e3ba2895493041015f91fe5799e9fb05cef87acabfad8fcfbd33c6395fd8c8e2fb1593f
SSDEEP 12288:RXJSk+Ky4sRf7wRqBdjWdjzLBjlegmKTsEs+F8LTCFfTZJt8HE+7cC+2t:TSke4sRzwY3jWhLzJmKIEshnyfztD0cS
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

persistence

Malware Config

Targets

- Target
  940a34458e274e227d1e3ab0630f494f6fbe65624561d45eb8d79e4fc3f91023.exe
- Size 647KB
- SHA256 940a34458e274e227d1e3ab0630f494f6fbe65624561d45eb8d79e4fc3f91023
- MD5 0d66a9a25e877722a0040f235d5d5487
- SHA1 a17817b44856cc038f5808738ce9ebebbe696f44
- SHA512 d24a81367e579437a477285591b3ae1da56e6111b21275201b62c0358e3ba2895493041015f91fe5799e9fb05cef87acabfad8fcfbd33c6395fd8c8e2fb1593f
- SSDEEP 12288:RXJSk+Ky4sRf7wRqBdjWdjzLBjlegmKTsEs+F8LTCFfTZJt8HE+7cC+2t:TSke4sRzwY3jWhLzJmKIEshnyfztD0cS
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
- Legitimate hosting services abused for malware hosting/C2
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  Brintjoners/Smalriflet/Netvrksforbindelsen/Apods/Penetration.Ove
- Size 60KB
- SHA256 4129bd06b0cd63f79193a91bf5e3574555705954539968fe27c9b457a7fdf65b
- MD5 9c5c30955b31db19389340fd7caa462a
- SHA1 5552933f9cccca769246d05f460a308b8e834bf4
- SHA512 f4c2930de3e7eea12fee04b25cec1d97943833baf8c1362434bdc0c47b47f4fa893d830347f5b0560861af4788317423340f118671a39f87721758139d5cb9e5
- SSDEEP 1536:WSBGuDZ1wzlKxTfgtlE0N6jCJSi7m6KgLkBVzmxrlYn:WWvdjgXENjCUi7mbzBVzm5lYn
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

persistence
- Modifies Installed Components in the registry
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4