General

  • Target

    22fb7537289d86cd7fd50b422bdd6bfdf39b8b5acde825a46bc4a45c74510df6.exe

  • Size

    565KB

  • Sample

    240521-rf8hpsgf37

  • MD5

    7a1ecb7cca4516098958ae01abcafa73

  • SHA1

    93c785a358c587a18cc1c526ffd626cab8acd43b

  • SHA256

    22fb7537289d86cd7fd50b422bdd6bfdf39b8b5acde825a46bc4a45c74510df6

  • SHA512

    3d0fee19ee94f4b210014a8f9db3020e6e31638a79d592a1f6797513af52ab6b360e05882b967d9e76c821cb93678e78f7f079e7fbbca019fa9accf578eb54d9

  • SSDEEP

    12288:beCLyNx2qdIzjxxtjHpTLrfc8U7Jd9GQeMsNCcqkPqzQ+KsjC:bebNwqaz9jbpTS7J3RgxqzQ1V

Score
7/10

Malware Config

Targets

    • Target

      22fb7537289d86cd7fd50b422bdd6bfdf39b8b5acde825a46bc4a45c74510df6.exe

    • Size

      565KB

    • MD5

      7a1ecb7cca4516098958ae01abcafa73

    • SHA1

      93c785a358c587a18cc1c526ffd626cab8acd43b

    • SHA256

      22fb7537289d86cd7fd50b422bdd6bfdf39b8b5acde825a46bc4a45c74510df6

    • SHA512

      3d0fee19ee94f4b210014a8f9db3020e6e31638a79d592a1f6797513af52ab6b360e05882b967d9e76c821cb93678e78f7f079e7fbbca019fa9accf578eb54d9

    • SSDEEP

      12288:beCLyNx2qdIzjxxtjHpTLrfc8U7Jd9GQeMsNCcqkPqzQ+KsjC:bebNwqaz9jbpTS7J3RgxqzQ1V

    Score
    7/10
    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      8b3830b9dbf87f84ddd3b26645fed3a0

    • SHA1

      223bef1f19e644a610a0877d01eadc9e28299509

    • SHA256

      f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37

    • SHA512

      d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03

    • SSDEEP

      192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks