113857ad67b6d744bd0e7ea6fa231b0aaffa8dae64b84819bfd489c8f712c080 | Triage

Sharing

General

Target

WNPso9.rar
Size

13.6MB
Sample

240824-qkldastdqj
MD5

4c6c385799464bfe99e40ec22d230992
SHA1

f52fd5f6145561c34c007611559479c6e7830c0f
SHA256

113857ad67b6d744bd0e7ea6fa231b0aaffa8dae64b84819bfd489c8f712c080
SHA512

84f01d1a0aadcc2ce9ea6ccd1bf401e0aa20314b3156c95b450ef4a5fdcdb4930b75d7af419594560289e92ce5f1972325662b3fbaa2c8d79d47fd0c5d28cced
SSDEEP

196608:jfrCIiLSygo6LZKjcs+oENoB/p4Bo5TMx9H7keqAQNc5FNB7WRjsUZn5h/+e7Vk2:jfddLHHCA/7kbNc5FOsUJGe7VkovHZv

Score

5^/10

discovery

Malware Config

Targets

- Target
  
  WNPso9/Mec31IM.exe
- Size
  
  6.2MB
- MD5
  
  c8e8eeaf5464af1a188b3dc12c890813
- SHA1
  
  2df041366b9de8a2b982205b15f7264145e81644
- SHA256
  
  e528455778d952acfc5b330b378f2c53cc92e55cfeab1c1e1dbb52e01d626bb4
- SHA512
  
  8119bd5a7fe790f1ebf1b2c5411264c32a193718851746c26183b8a48293d61e8f9f3eeb97cc851a419b5b41038bc63bffd17e99907ad4f8cdee63f7151dbe46
- SSDEEP
  
  196608:fW1Hje3HvntQwZSPyl7N6nds1HhmwcOaXr:myvtrxBL1QSaXr
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2