General

  • Target

    2a5704a75c148a41d3c1d9d17bafa6b150e162819f5196d4b46990ca305ec609.exe

  • Size

    637KB

  • Sample

    240611-bhbczsydpp

  • MD5

    6e82252e3ce511a42ba01007dc53b7b5

  • SHA1

    0dfd9a3b54c59c3e0455f4e632770cf84626af6d

  • SHA256

    2a5704a75c148a41d3c1d9d17bafa6b150e162819f5196d4b46990ca305ec609

  • SHA512

    48b57bcc64b9071f05a718fc05511b00bb34dd351d76bc7828c93b5441fbf7e4fc1c42e844d68ca8f2a9525d7e9d89b9547a88c00ebe9835dab3008edd878679

  • SSDEEP

    12288:f8oTmXIyxqNFmhoKAzWgi96IAEy9UhK+8TAQ5+rROXP:EoTWq76oKADi96kyK104If

Score
7/10

Malware Config

Targets

    • Target

      2a5704a75c148a41d3c1d9d17bafa6b150e162819f5196d4b46990ca305ec609.exe

    • Size

      637KB

    • MD5

      6e82252e3ce511a42ba01007dc53b7b5

    • SHA1

      0dfd9a3b54c59c3e0455f4e632770cf84626af6d

    • SHA256

      2a5704a75c148a41d3c1d9d17bafa6b150e162819f5196d4b46990ca305ec609

    • SHA512

      48b57bcc64b9071f05a718fc05511b00bb34dd351d76bc7828c93b5441fbf7e4fc1c42e844d68ca8f2a9525d7e9d89b9547a88c00ebe9835dab3008edd878679

    • SSDEEP

      12288:f8oTmXIyxqNFmhoKAzWgi96IAEy9UhK+8TAQ5+rROXP:EoTWq76oKADi96kyK104If

    Score
    7/10
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      b0c77267f13b2f87c084fd86ef51ccfc

    • SHA1

      f7543f9e9b4f04386dfbf33c38cbed1bf205afb3

    • SHA256

      a0cac4cf4852895619bc7743ebeb89f9e4927ccdb9e66b1bcd92a4136d0f9c77

    • SHA512

      f2b57a2eea00f52a3c7080f4b5f2bb85a7a9b9f16d12da8f8ff673824556c62a0f742b72be0fd82a2612a4b6dbd7e0fdc27065212da703c2f7e28d199696f66e

    • SSDEEP

      192:4PtkiQJr7jHYT87RfwXQ6YSYtOuVDi7IsFW14Ll8CO:H78TQIgGCDp14LGC

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks