Overview

overview

5

Static

static

3

豆包传世.exe

windows7-x64

5

豆包传世.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c89bc7783849d402454935db068b60a.bin

  • Size

    7.5MB

  • Sample

    240422-bnhz1sde45

  • MD5

    69254fa88c7f597433f4bd76c42b7e8f

  • SHA1

    2241b62145bf1e972d237ce145ffd07843713c49

  • SHA256

    235374367797c6cac7604c6997590d2c7fb5c06057ebdba2af57f14a1442d5de

  • SHA512

    d640e3adabae209e0dbbf3f42788690272cd71db56176effaf4f33563780d39bdbc36003c6f168a4cc8ccf104a947a7241fd4bf42002ced13b6c9d6a218ba620

  • SSDEEP

    196608:XrNC8FKLsAKkPJo6eeV4goVZYjjGgZea6webY/qAzH2+QeAJSGY+aAGF2Z:xC8FKIMy6HVUVujjF96w/qU2+mw2GF2Z

Score
5/10

Malware Config

Targets

    • Target

      豆包传世.exe

    • Size

      7.8MB

    • MD5

      bdd8475f7d61e0e040fb4bc0c04be632

    • SHA1

      4d02cd34ddac9f72622bd5f8c482c8123739cc5b

    • SHA256

      56bf06097a4002d570cb291a755231e331e23797889a831da7f4ce7f278d2355

    • SHA512

      cbb5b37e3f641a1a15f1dcde2890989367c46bbad7602cf75fef1c76cea858fd7fe53c79e33e110a3c4d6f0b5c0c2dfd7cb1b42b850873ed1510ea4860e3f51f

    • SSDEEP

      98304:k+D/SiClYHp8fVien4vOFipGQ9nLcDy+fXOIP+POpaagyAZyuaPCtByE6228hAuu:kW/pa+Hno2yPIOAfyuSZE6IARwex

    Score
    5/10

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks