General

  • Target

    ChessBot_demo.zip

  • Size

    13.3MB

  • Sample

    240826-br4qwsxarh

  • MD5

    313be50835b5e5c16843acf447a2f6bf

  • SHA1

    12d52f6e49b42788cc3916b1fcd30883f4181a06

  • SHA256

    87e875dbcb220c06eeef00fba2f38304cb3028641df26d1799c6b8534ec1ce1e

  • SHA512

    572a8aa6afe3c49380cf66d4c528da297f3b0fb49637670c8f4e77094f8e5b6d91544ad86c563cb8aef426f26a0a65b4e9698af7ff4ed2f476e8bf6d263b1561

  • SSDEEP

    196608:z8L748SZCTcVWddxJsoX4OdN6g2O/zKv4SIiPAmAV5ft9+Ef/Cdqr8OMNYfd7GXl:z8/4qTFp7dNlOAFiohnfSMqOMNY9dsLV

Score
5/10

Malware Config

Targets

    • Target

      ChessBotX Trial/ChessBot.exe

    • Size

      14.9MB

    • MD5

      d777f5ecef75f5e4d3568d438d68401e

    • SHA1

      62ff0fd1448805631d8d52f6806e000a9355fbb8

    • SHA256

      30ce2ad402a3bdc311259d7af3b097c8c2eb6f15c4f76d4b5cbc71ca564cd4fa

    • SHA512

      2b31aa087e60d57a5755d500f82cccb63fbd1daee6b344c19ba241214d49d263ab34ecd262bdff5e062cc821a6b0cd4ebb00c32dce66452fb6cca2d4a00ac993

    • SSDEEP

      393216:+Dma17FSQM1DycoyhU2TbH4dGUKzQlUavKaOr:4jSQPzCxbEGfzivpOr

    Score
    5/10
    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks