Resubmissions

04/08/2024, 01:11

240804-bkcntswdkh10

04/08/2024, 01:08

240804-bhmq1swcqa5

General

  • Target
    Muse_Hub.exe
  • Size 42.8MB
  • Sample240804-bhmq1swcqa
  • SHA256 777516469e953cb8ef945f558388aa27a4bb0e4849d35295a54fa9b104916c73
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      Muse_Hub.exe
    • Size 42.8MB
    • SHA256 777516469e953cb8ef945f558388aa27a4bb0e4849d35295a54fa9b104916c73
    • MD5 SHA1 SHA512 SSDEEP
    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Suspicious use of NtCreateThreadExHideFromDebugger

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks