Overview

overview

8

Static

static

1

screenshot.png

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    screenshot.png

  • Size

    367KB

  • Sample

    240607-cglb8sfg8x

  • MD5

    1af7b32ae7c033158321b75323cebaeb

  • SHA1

    05103eead49bb03f2efddc67588359d6e099d010

  • SHA256

    ddd3f52feeb4b80ffd5f0783378f854d02af440481d3f9b6173718eeeb00c249

  • SHA512

    4d5b598951de46fb732b7438d820a9bd110a8cf00cb12b6a08a02729121673cf38dc810b444841cfe136458c3869b2413ba340488fabd70a96ca1e51486f63fa

  • SSDEEP

    6144:FQ+MEF2N8jySixEP7htSW+i4B2ImFSf0w4vOKtmzIdv8zhLtg7tjz:FQ+Mj+jJixEPmWl62Imwf/QWIdAhxgBz

Score
8/10

Malware Config

Targets

    • Target

      screenshot.png

    • Size

      367KB

    • MD5

      1af7b32ae7c033158321b75323cebaeb

    • SHA1

      05103eead49bb03f2efddc67588359d6e099d010

    • SHA256

      ddd3f52feeb4b80ffd5f0783378f854d02af440481d3f9b6173718eeeb00c249

    • SHA512

      4d5b598951de46fb732b7438d820a9bd110a8cf00cb12b6a08a02729121673cf38dc810b444841cfe136458c3869b2413ba340488fabd70a96ca1e51486f63fa

    • SSDEEP

      6144:FQ+MEF2N8jySixEP7htSW+i4B2ImFSf0w4vOKtmzIdv8zhLtg7tjz:FQ+Mj+jJixEPmWl62Imwf/QWIdAhxgBz

    Score
    8/10

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks