General

  • Target

    Karma.rar

  • Size

    26.9MB

  • Sample

    240526-c4p9psbh6w

  • MD5

    e561df2e7a519b1e87413e0eb705c6bf

  • SHA1

    91a1872cb5358870001aefab41ea033d230b3e5c

  • SHA256

    13c42d320f8be737c8fcbb72a24cedad7c5bf22e12f09d5775a711d715f5a983

  • SHA512

    202d3e1ebc8fa0378078d6d16a7263f7a34cb680f2814e0b74b034cc33d6f5aa44dfa8bcadeb4e073beae2439c42203c1467fd858751f91a906676098cd55626

  • SSDEEP

    786432:rt9yrAvk4/k4gLCheL3U+/cpQiq3hXbql19/T:/K980Q+/caimhLqj9/T

Score
7/10

Malware Config

Targets

    • Target

      Karma/Karma.exe

    • Size

      17.8MB

    • MD5

      c7cdc36aa916c21f66150d399e92d40b

    • SHA1

      32d2239a4a3cc2d3964a9500c6c8bfc3e57ada4a

    • SHA256

      7b61415cdf55c6ff24eb2417af54c9b247743dd92603eb9a889561181e01a884

    • SHA512

      f1f58f821169131e5cfd33c15baa73f1613d083932239aa90381113170f065cf54fbe9f312fabbc592670b846eeca7f844f60262b5896ad855f4e65226786515

    • SSDEEP

      393216:1Nyz+pPwtWw6jSvBi/fhW1ribMgSS0fUMCnB0rF+GbW5KDcL:bg+pPw4w6jSvBli4PBrFtkKE

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      Karma/main.exe

    • Size

      9.6MB

    • MD5

      0a3a02ddeff49d3b358fa9f2a0dbc10a

    • SHA1

      683f5415cef48235a4617e3c9ff17834c37422ca

    • SHA256

      3cbe12345bb51f8b87528be5fc3f156bb8e0ed7c855b1740f61fc87bac7709d9

    • SHA512

      92f8daf8456565753602071c9bbb678edc4d902668682f24888c714c9aac7710e35098743e51a12ec92cbdd8652f43a259307a88260e7a9f327d5559c50ef2d6

    • SSDEEP

      196608:j80FzJRL2Vmd6+DxWVuSn80urLZy7YM30Lzaj7XCXpFOoU7Qc8IdXo:PlRL2Vmd6mxWj8J0Gzaj7yXP1jc8CY

    Score
    7/10
    • Loads dropped DLL

    • Target

      main.pyc

    • Size

      577B

    • MD5

      8c9227c8c69ff027fea4a9dfdd150d41

    • SHA1

      82021bf055cb0e156f2833928db1871504037fb1

    • SHA256

      e0e1d931a0e8bc94ef6ff36c35e9fab296b77d2669a0ca4ab1175fb852c8f136

    • SHA512

      968cfcc14d982be5ac3f21be611ab526eef291ee9b5a9d4fb116f07facb91b4204d2723b2f0bea29f8a76b674dfb99f85986a4f66b7dfeb4e4f7454372bddda1

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks