f835b11aba1d3384ba9f66ffa88fadab60be3d9bf988c638406cf5678099aca4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02082024_0159_31072024_Factura_FFP-2024-0607.zip
Size

676KB
Sample

240802-cet7cstfkc
MD5

24b0a6de0a5ef5176ba51cc8d6650f8a
SHA1

7143591f337df2447daa317c7514237461f22a90
SHA256

f835b11aba1d3384ba9f66ffa88fadab60be3d9bf988c638406cf5678099aca4
SHA512

3baa4517e765c29d7e8ed98b8ba7a13a4662a3b561b2ddedc09a062df9b98e24ddc12b809e32aeb6fc6bff22018bff6768f528be7e808c3b2b4e8d1851a5f2b6
SSDEEP

12288:hDGCWfJXNg5rKPDKXqIzLFaO3tscIti8r/h2BZhrvu/08HCRTchll0lmZEtgmpdo:h6DDg5rKbIqQhtscp8FAK08iRTAXELt6

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  Factura_FFP-2024-0607.exe
- Size
  
  725KB
- MD5
  
  9be93ae15d50f75c69d28dc5abd99391
- SHA1
  
  68c79a68f0c87e62d4ce79111cb9949a9ac6698a
- SHA256
  
  742f11c8c2b7d3d09406bc8bb169a5f3a817a78b5fc56eed6fce5decf63ecb9a
- SHA512
  
  2c3a669f75ce95ad40b13286824b0e8de5ee74996b91fbd11e76d0f4411fccd054587b8de91ad7c40fd5a75e24272b91cbd3411575a57d7bef986d231628fbf8
- SSDEEP
  
  12288:CZxOpnAArPhfBX7CLrKPZKXqI7LBa63tT8rN/2BHhFv9mkRXPcBJl0JmZEpgmL7M:CZwaAr9VCLrKBIqyLtT85gFbPabmLpgD
Score

5^/10

discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2