General

  • Target

    5b5cf73065eedf7b6d1bd187cd55db90N

  • Size

    384KB

  • Sample

    240908-lfmcksxhrk

  • MD5

    5b5cf73065eedf7b6d1bd187cd55db90

  • SHA1

    33c60db6e2f2f567d691ea23369e6ee15db6bade

  • SHA256

    f9910c6473df2418b0f87cbdb956afdd315ffa18fe4d5e814711b83c83c12f06

  • SHA512

    52b20260501553f52f5de2db542250a6fba23f1a389051d8ad27297ebfa1cb1b60d0dbede36b697c2b4c79a34c24083240978ca8198160d3bff1baabec6f54fa

  • SSDEEP

    12288:EaVPyRyOMjVArM1KABAGRY0DJ8L52FNrZ:bBWMBAK/BYqNrZ

Malware Config

Targets

    • Target

      5b5cf73065eedf7b6d1bd187cd55db90N

    • Size

      384KB

    • MD5

      5b5cf73065eedf7b6d1bd187cd55db90

    • SHA1

      33c60db6e2f2f567d691ea23369e6ee15db6bade

    • SHA256

      f9910c6473df2418b0f87cbdb956afdd315ffa18fe4d5e814711b83c83c12f06

    • SHA512

      52b20260501553f52f5de2db542250a6fba23f1a389051d8ad27297ebfa1cb1b60d0dbede36b697c2b4c79a34c24083240978ca8198160d3bff1baabec6f54fa

    • SSDEEP

      12288:EaVPyRyOMjVArM1KABAGRY0DJ8L52FNrZ:bBWMBAK/BYqNrZ

    • UAC bypass

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks