General
- Target da2f362c315e776de40b0805c5d3571b.bin
- Size 341KB
- Sample240501-b8vjjsdc2w
- SHA256 fa53f8c7ca9bfb109801818f0d680200e100938417952e963cf0f5b880cdcb52
- MD5 b46bb68dd5345a8568a780fab0c890f0
- SHA1 dbdc3f237a460aa577d1c5095ef69ae465098adb
- SHA512 432c0fba19d92ebd32f461359a1b41abb9bfbc52732a7ecdd3256a005ca45c24d190a56a3fc95fbf58a991000ef6499dda2655f455dfe05d32728e89dd3af2a1
- SSDEEP 6144:bHcKD9f5mfvLhBLFbToWz6q5hkeecoWfe3+dx9cK29yryOOeSR8mhWDbIezfC:DfDNOh1dUWOqImoWfjvO9yryBL7hSIeC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
45cc8cde27d45cadec7dfec83f44215b807531439a0b2530f965fa5d4acda1b6.exe
Resource
win7-20240221-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
45cc8cde27d45cadec7dfec83f44215b807531439a0b2530f965fa5d4acda1b6.exe
Resource
win10v2004-20240419-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Filmrullerne/Tendance/Unredacted.ps1
Resource
win7-20240215-en
9 signatures
150 seconds
Behavioral task
behavioral4
Sample
Filmrullerne/Tendance/Unredacted.ps1
Resource
win10v2004-20240419-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 45cc8cde27d45cadec7dfec83f44215b807531439a0b2530f965fa5d4acda1b6.exe
- Size 372KB
- SHA256 45cc8cde27d45cadec7dfec83f44215b807531439a0b2530f965fa5d4acda1b6
- MD5 da2f362c315e776de40b0805c5d3571b
- SHA1 bc6e0d5ed9e74470bdfe2d854c3a798c2e45b074
- SHA512 e53917235541dcbc9064c913cef731e101dd15593c7276febb122a3549214c30180485394e0e1867d58e41326c7fc3efd04543a85e55443c44e12838b08d006c
- SSDEEP 6144:HT4DtVpZI3UkwlUEkFvjV5Uioj7RODGIe2gngkOt/NONJp98AGECTcz8mFsgeJ:HTghmEkFx5Uf4wOt/NA8JE2bJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Adds Run key to start application
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-
- Target Filmrullerne/Tendance/Unredacted.Sai
- Size 56KB
- SHA256 28c901a827e59109f467be705332d753c0fabb390ced9c2a69c48110c69d18a5
- MD5 b1d727d282df9997c8bbd3d296352191
- SHA1 143e2878ec786de7b8ac80958ac8509c9c26746e
- SHA512 0d9e30f588ac8c7f3b02a8e2a32ef8159255f89baf88bc05d4db89c3986492d0ba00e07e3da09a5bb64e58971c40260bb3c09712dfcb03e1c69a9554ecf4a80c
- SSDEEP 1536:TrVbCEwTZDc1LBlJ5PYy6CZk9F9RDdRslZLhjqHjVRR:kEwTtULBrB5k7vjYLh0VRR
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Modifies Installed Components in the registry
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.