General
- Target balls.exe
- Size 5.1MB
- Sample240604-cmkynaad94
- SHA256 3b86527b1f49d776b9ec0d2ab87be2bd23069c5c4ada6c2fb46abf62f42262a4
- MD5 08962d53376091e3387b4ffac36d8cc8
- SHA1 39768af1242a332c3d79450feae9fecc768dbc34
- SHA512 5830e607d304a07ec8b73b31ced43355e6a6d434292f6551a3fcf73d190ff4126696ad08ea6b513e6e55a5265ed3271da61c5c805e25e7373d1f8da59799c2e8
- SSDEEP 98304:tvFCHoiGfuHyJE/VFuePSLCg8hvl8Uv5NyI7LXE/QTtLWRvnSk+utYJowTItilSj:t0IiGCVFuePSLCgCvlvNyqm6tyZdYJo1
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
balls.exe
Resource
win10v2004-20240508-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target balls.exe
- Size 5.1MB
- SHA256 3b86527b1f49d776b9ec0d2ab87be2bd23069c5c4ada6c2fb46abf62f42262a4
- MD5 08962d53376091e3387b4ffac36d8cc8
- SHA1 39768af1242a332c3d79450feae9fecc768dbc34
- SHA512 5830e607d304a07ec8b73b31ced43355e6a6d434292f6551a3fcf73d190ff4126696ad08ea6b513e6e55a5265ed3271da61c5c805e25e7373d1f8da59799c2e8
- SSDEEP 98304:tvFCHoiGfuHyJE/VFuePSLCg8hvl8Uv5NyI7LXE/QTtLWRvnSk+utYJowTItilSj:t0IiGCVFuePSLCgCvlvNyqm6tyZdYJo1
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Sets service image path in registry
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1