Resubmissions

16-07-2024 10:25

240716-mfxc8a1apd 10

16-07-2024 09:52

240716-lwdelszand 10

General

  • Target

    SpooferVMax(open as admin)_CRACK.exe

  • Size

    719KB

  • Sample

    240716-lwdelszand

  • MD5

    406482283a5facbed225529d5099fa68

  • SHA1

    096fe20697593b1abdd4156d7b19059e28c22444

  • SHA256

    a9564b62f481aa802d5e28dfa6299b540f11a44781aa349831a9d5e56fc54712

  • SHA512

    cb63e2a72316cb41d855876de9791bacdde68b51c574987b5ee6e260c83e98dadd627e1dd2de825353f39cc2416e40c54c59b3b30f9e3490704213cc588add47

  • SSDEEP

    12288:rysH2Ce/BhQDUx2tKW8NbxdtZdIWwHkIjgIFhMceC/:rfWCKQDg2MdxdtPISIjtMBC

Score
10/10

Malware Config

Targets

    • Target

      SpooferVMax(open as admin)_CRACK.exe

    • Size

      719KB

    • MD5

      406482283a5facbed225529d5099fa68

    • SHA1

      096fe20697593b1abdd4156d7b19059e28c22444

    • SHA256

      a9564b62f481aa802d5e28dfa6299b540f11a44781aa349831a9d5e56fc54712

    • SHA512

      cb63e2a72316cb41d855876de9791bacdde68b51c574987b5ee6e260c83e98dadd627e1dd2de825353f39cc2416e40c54c59b3b30f9e3490704213cc588add47

    • SSDEEP

      12288:rysH2Ce/BhQDUx2tKW8NbxdtZdIWwHkIjgIFhMceC/:rfWCKQDg2MdxdtPISIjtMBC

    Score
    10/10
    • UAC bypass

    • Downloads MZ/PE file

    • Checks whether UAC is enabled

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks