Overview

overview

7

Static

static

7

photon.exe

windows7-x64

7

photon.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    photon.zip

  • Size

    1.7MB

  • Sample

    240816-zbd3asyfpj

  • MD5

    971490dfc0a9fdf5a155455c8bb1e8f5

  • SHA1

    4599bd3b56ccb1f01b55716acce729f28f910135

  • SHA256

    2dfab669dcfcbfc34741e77a124a52e35a327f703ba6bc657d55b81ba579b2ec

  • SHA512

    45082ffa11a684f190da8568ce0dbcac6dd794142f7e2491c23665352e1bf9ad39b795ff45f7d9cc46d4bfd64d8d32bc62d5bf65af54b3cb375ba4df5dc39692

  • SSDEEP

    49152:G82oSi/be4wZWWjHIZ3aa7KQ7RQYBMUOcHwdJs0FNBjK:G82ji/w2Z3d7RQ6vHW3Ns

Score
7/10
upx

Malware Config

Targets

    • Target

      photon.exe

    • Size

      1.8MB

    • MD5

      05d0c7ee081ace02b7517e1bb654e3e1

    • SHA1

      4076e9a2fac68c029cd3d31d4901d9a5b5f9f3e5

    • SHA256

      ba31ab853471f18b308b6399f34953263d39851ad24011b3ad95a5ee7c10d536

    • SHA512

      ed1df64cb25453aad36e80ae912f8b925666b97cd236c665a53fd0c4973c00f072c0d852cb529280b1bb28fd5b224ee09e2ba4dfd310b515cb2cc336c0734b4e

    • SSDEEP

      49152:Y7UPSOzB3JRa7ei7MVzaa35iN+kbV2hj0veLnl+Fint:ouSOhJRdPzZUN+K00Gnl+0

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks