Overview

overview

6

Static

static

3

auth.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    auth.exe

  • Size

    7.4MB

  • Sample

    241012-x65sdsxelh

  • MD5

    1ac65b4ef2240f786c7044114b4b50ca

  • SHA1

    62f9c473298583331059a9520cd8c15dc5dcbf79

  • SHA256

    98ea51a36daf5312cbb1b1df3ef9e2e613c9cb8bc3a208154b2a1467c64d5679

  • SHA512

    546337e53d1a6734048f68b895de88e2b7a7cf62642d3447d688dafdce4d72520a0d73e7c3391d14df15597f3352608930a71019e9c40a1252046dcf3fcd310f

  • SSDEEP

    196608:eVYKheGSdSHfH+5LMssz8WgnfWLjxf99GJ5g/:ah7qSHfH+5LMcFkj599w5W

Score
6/10

Malware Config

Targets

    • Target

      auth.exe

    • Size

      7.4MB

    • MD5

      1ac65b4ef2240f786c7044114b4b50ca

    • SHA1

      62f9c473298583331059a9520cd8c15dc5dcbf79

    • SHA256

      98ea51a36daf5312cbb1b1df3ef9e2e613c9cb8bc3a208154b2a1467c64d5679

    • SHA512

      546337e53d1a6734048f68b895de88e2b7a7cf62642d3447d688dafdce4d72520a0d73e7c3391d14df15597f3352608930a71019e9c40a1252046dcf3fcd310f

    • SSDEEP

      196608:eVYKheGSdSHfH+5LMssz8WgnfWLjxf99GJ5g/:ah7qSHfH+5LMcFkj599w5W

    Score
    6/10

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks