General

  • Target

    ST_TriggerBot.exe

  • Size

    16.7MB

  • Sample

    241006-ky3lva1bnf

  • MD5

    e5f10afee8123dbc2bf47ffe7fcfb0fb

  • SHA1

    0908884900852e59ad41820af44ac1b157b29571

  • SHA256

    bf6b8227dad9296d913e3f00a1de5546ba415f0341f5b30bc6474ba2b27c8c81

  • SHA512

    74d5cc325e8f2112e0261b0fa291f34241343b95bb249d6e8b3c79395671d9bc2a53a3b716e27ccfc9c75c9365253933c92a2c310c0dd053f1ca473c303d069e

  • SSDEEP

    393216:qfD/OxIfWR7A9Lot7QYFMRUExsp2U+nfDUS6:0DXuRQLoZ8Xxsp2UO

Score
6/10

Malware Config

Targets

    • Target

      ST_TriggerBot.exe

    • Size

      16.7MB

    • MD5

      e5f10afee8123dbc2bf47ffe7fcfb0fb

    • SHA1

      0908884900852e59ad41820af44ac1b157b29571

    • SHA256

      bf6b8227dad9296d913e3f00a1de5546ba415f0341f5b30bc6474ba2b27c8c81

    • SHA512

      74d5cc325e8f2112e0261b0fa291f34241343b95bb249d6e8b3c79395671d9bc2a53a3b716e27ccfc9c75c9365253933c92a2c310c0dd053f1ca473c303d069e

    • SSDEEP

      393216:qfD/OxIfWR7A9Lot7QYFMRUExsp2U+nfDUS6:0DXuRQLoZ8Xxsp2UO

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks