General
- Target Muse_Hub.exe
- Size 42.8MB
- Sample240804-bhmq1swcqa
- SHA256 777516469e953cb8ef945f558388aa27a4bb0e4849d35295a54fa9b104916c73
- MD5 f6a5eeafe3927f8b60edd4710f472526
- SHA1 90990dc31a9ce75456d68653309e4b37291bf54e
- SHA512 03efbe3004b1434fa13e230b1c8f8526cfafeb94ee6d9a4e1b65ab316d183e86c39d1af0def4a48d3d65d186d5f7b3c76352b57ae40288e9171893ca58c9f4e4
- SSDEEP 786432:WxfDPC5XlW/BIWj9Tp+V9w/PHyNmG3i+QpNT0Oxwkyh2YvLYpv1A8AmZ4HEleUau:WxfD6yaeYV9EKNmG3iYOGke2+0nA8AmR
- MD5 SHA1 SHA512 SSDEEP
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
Muse_Hub.exe
Resource
win7-20240708-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Muse_Hub.exe
Resource
win10v2004-20240802-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target Muse_Hub.exe
- Size 42.8MB
- SHA256 777516469e953cb8ef945f558388aa27a4bb0e4849d35295a54fa9b104916c73
- MD5 f6a5eeafe3927f8b60edd4710f472526
- SHA1 90990dc31a9ce75456d68653309e4b37291bf54e
- SHA512 03efbe3004b1434fa13e230b1c8f8526cfafeb94ee6d9a4e1b65ab316d183e86c39d1af0def4a48d3d65d186d5f7b3c76352b57ae40288e9171893ca58c9f4e4
- SSDEEP 786432:WxfDPC5XlW/BIWj9Tp+V9w/PHyNmG3i+QpNT0Oxwkyh2YvLYpv1A8AmZ4HEleUau:WxfD6yaeYV9EKNmG3iYOGke2+0nA8AmR
- MD5 SHA1 SHA512 SSDEEP
Score5/10Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
Suspicious use of NtCreateThreadExHideFromDebugger
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v15
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1