Overview

overview

5

Static

static

3

prov2.exe

windows7-x64

5

prov2.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    prov2.exe

  • Size

    41.8MB

  • Sample

    240913-m132hayglg

  • MD5

    75282f1bdb3a84eb3d569f82b1964f24

  • SHA1

    af2901c1d9b2226e812b385ff66fcceb40aa818e

  • SHA256

    538cd680cfd169dffe5b15b4db2bc82c7873d91adb2c8fc130a486fcd556a399

  • SHA512

    496ed4f3c0a1ac654329fb9ffa5980e5e59eac21f9507223e83fd6e9fc268ecea8751fc4c219ec2b9711aeb5df23940f5414d7c71b57234721c1febf82dfd8b3

  • SSDEEP

    786432:E9A2hokvGl64qOVH1H0nXto2UUoFJi/VtVzy32HQnxmhKWvJ8tjtQlnuNZ:LRgg6tO8XtKUoFJ+XVm2OwpJ8tjtZ

Score
5/10

Malware Config

Targets

    • Target

      prov2.exe

    • Size

      41.8MB

    • MD5

      75282f1bdb3a84eb3d569f82b1964f24

    • SHA1

      af2901c1d9b2226e812b385ff66fcceb40aa818e

    • SHA256

      538cd680cfd169dffe5b15b4db2bc82c7873d91adb2c8fc130a486fcd556a399

    • SHA512

      496ed4f3c0a1ac654329fb9ffa5980e5e59eac21f9507223e83fd6e9fc268ecea8751fc4c219ec2b9711aeb5df23940f5414d7c71b57234721c1febf82dfd8b3

    • SSDEEP

      786432:E9A2hokvGl64qOVH1H0nXto2UUoFJi/VtVzy32HQnxmhKWvJ8tjtQlnuNZ:LRgg6tO8XtKUoFJ+XVm2OwpJ8tjtZ

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks