Overview

overview

10

Static

static

3

AntiCrack-DotNet.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    AntiCrack-DotNet.exe

  • Size

    172KB

  • Sample

    240806-2edxtasfpj

  • MD5

    d99f8cc0af0316198ced3ad7619b4594

  • SHA1

    3f072984fa9c5d419e6ce34ecc345c3d4769ffb3

  • SHA256

    567fc9560e744ea3bd47eef607bb3559aa66bce9b7f00adbbe2a31bcbe44ccca

  • SHA512

    a1fc867fdcac8d6bae015b5db9feb61b5dc372f7336d76115942c4e624dca470c1f39be46f51c5a6ee4c3fcbd1ad49b1e0dc832e2daf7bcec4d902ede5b91f56

  • SSDEEP

    3072:UVqoCl/YgjxEufVU0TbTyDDalRecXblQUgNUpyBmjN9lPbvXCArj4cPZDyutMdU0:UsLqdufVUNDarqJ

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      AntiCrack-DotNet.exe

    • Size

      172KB

    • MD5

      d99f8cc0af0316198ced3ad7619b4594

    • SHA1

      3f072984fa9c5d419e6ce34ecc345c3d4769ffb3

    • SHA256

      567fc9560e744ea3bd47eef607bb3559aa66bce9b7f00adbbe2a31bcbe44ccca

    • SHA512

      a1fc867fdcac8d6bae015b5db9feb61b5dc372f7336d76115942c4e624dca470c1f39be46f51c5a6ee4c3fcbd1ad49b1e0dc832e2daf7bcec4d902ede5b91f56

    • SSDEEP

      3072:UVqoCl/YgjxEufVU0TbTyDDalRecXblQUgNUpyBmjN9lPbvXCArj4cPZDyutMdU0:UsLqdufVUNDarqJ

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks