General

  • Target

    aec3d30b3d0b684e97a5820db21dd64df2208b86eb19433a26d9aba08b2ac655

  • Size

    553KB

  • Sample

    240606-casgzaec2w

  • MD5

    bd855bfca47e55fe6501719a6efe3358

  • SHA1

    7842b2b75624d1b60e7802d5382514969ed0fa7d

  • SHA256

    aec3d30b3d0b684e97a5820db21dd64df2208b86eb19433a26d9aba08b2ac655

  • SHA512

    3ce2c748fa78d5e7e0d64811d84f4b082a1db50db14d7f964b12110ab9bfe93ecc6882e76ca9cc8b1e6f27318f6c51b6be629a9b32a2df33727ddacf4c32ea46

  • SSDEEP

    12288:w0tCSx8YwSzqwf6ciciAVDklq5Dv1D9hNkZrMP/:wUCqwoViTAqkPDfNSr+

Score
7/10

Malware Config

Targets

    • Target

      aec3d30b3d0b684e97a5820db21dd64df2208b86eb19433a26d9aba08b2ac655

    • Size

      553KB

    • MD5

      bd855bfca47e55fe6501719a6efe3358

    • SHA1

      7842b2b75624d1b60e7802d5382514969ed0fa7d

    • SHA256

      aec3d30b3d0b684e97a5820db21dd64df2208b86eb19433a26d9aba08b2ac655

    • SHA512

      3ce2c748fa78d5e7e0d64811d84f4b082a1db50db14d7f964b12110ab9bfe93ecc6882e76ca9cc8b1e6f27318f6c51b6be629a9b32a2df33727ddacf4c32ea46

    • SSDEEP

      12288:w0tCSx8YwSzqwf6ciciAVDklq5Dv1D9hNkZrMP/:wUCqwoViTAqkPDfNSr+

    Score
    7/10
    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks