Overview

overview

6

Static

static

1

033baeccfc...AS.dll

windows7-x64

6

033baeccfc...AS.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    033baeccfca2c2e6eeeccbdb144689c0_NEAS

  • Size

    133KB

  • Sample

    240507-xhn5qscf55

  • MD5

    033baeccfca2c2e6eeeccbdb144689c0

  • SHA1

    1cb110d9d6e23327bfe8f55abd79da39cd491ad1

  • SHA256

    b73a89e91824920ad9b1d5b816f19254cfff263d58aa928abdfb8794315b54cb

  • SHA512

    46b3f9f760e2d234e94b6a8c32797bf3bf60fa718a7e3cf3bdf195df888cd76aae86a486e795e628238572a6b163fecf3ed5091619ed1f07981a1de672cb4096

  • SSDEEP

    3072:t6ygut32+NC94bijV8RI6Sy6ZXQJXzpAcJc7A7x4eU1E3nIpvaK6I47JE:Cut3gabiqRV5Jc8t4InIBSJE

Score
6/10
persistence

Malware Config

Targets

    • Target

      033baeccfca2c2e6eeeccbdb144689c0_NEAS

    • Size

      133KB

    • MD5

      033baeccfca2c2e6eeeccbdb144689c0

    • SHA1

      1cb110d9d6e23327bfe8f55abd79da39cd491ad1

    • SHA256

      b73a89e91824920ad9b1d5b816f19254cfff263d58aa928abdfb8794315b54cb

    • SHA512

      46b3f9f760e2d234e94b6a8c32797bf3bf60fa718a7e3cf3bdf195df888cd76aae86a486e795e628238572a6b163fecf3ed5091619ed1f07981a1de672cb4096

    • SSDEEP

      3072:t6ygut32+NC94bijV8RI6Sy6ZXQJXzpAcJc7A7x4eU1E3nIpvaK6I47JE:Cut3gabiqRV5Jc8t4InIBSJE

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks