General

  • Target

    8288a97063240196a1edbdf62a6af021a6245a385b53340403e93ace02a94b50.exe

  • Size

    332KB

  • Sample

    240511-bzn1eage29

  • MD5

    daae7b6cb6d222e1c484246fa176aee9

  • SHA1

    50529829ad3d112c04de0e2a493932c48586196b

  • SHA256

    8288a97063240196a1edbdf62a6af021a6245a385b53340403e93ace02a94b50

  • SHA512

    713ef4b9deb3482faa4de6bbf68b67574c8869052b2cdc953f0073803607e6514e94b5dce0d9cefe67b3fa03e504aa4bba6b6d788374562bb7fb47d32521f924

  • SSDEEP

    6144:EYa6EIIIIBDs7abaPvnEosVgq557NlqoCYpx9LCWwc+:EYCw+buEm0qs9LCc+

Score
7/10

Malware Config

Targets

    • Target

      8288a97063240196a1edbdf62a6af021a6245a385b53340403e93ace02a94b50.exe

    • Size

      332KB

    • MD5

      daae7b6cb6d222e1c484246fa176aee9

    • SHA1

      50529829ad3d112c04de0e2a493932c48586196b

    • SHA256

      8288a97063240196a1edbdf62a6af021a6245a385b53340403e93ace02a94b50

    • SHA512

      713ef4b9deb3482faa4de6bbf68b67574c8869052b2cdc953f0073803607e6514e94b5dce0d9cefe67b3fa03e504aa4bba6b6d788374562bb7fb47d32521f924

    • SSDEEP

      6144:EYa6EIIIIBDs7abaPvnEosVgq557NlqoCYpx9LCWwc+:EYCw+buEm0qs9LCc+

    Score
    7/10
    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      cff85c549d536f651d4fb8387f1976f2

    • SHA1

      d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

    • SHA256

      8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

    • SHA512

      531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

    • SSDEEP

      192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks