General

  • Target

    matrix.zip

  • Size

    2.3MB

  • Sample

    241120-ae7rcawka1

  • MD5

    03badd1ff5df686f02cd5ce75dde5cb7

  • SHA1

    17757e5474a8356873cdccd4a97f8aa1fdfd3f14

  • SHA256

    8ad09ce2a389e0d6bf1b5688dfa82f3d38e1c12ac5421ef1ea2999a08dd6dea4

  • SHA512

    acfd64e58b467018a8395fc1571bf7e211e5af846eb2f2ca0cab354be85047becc190f2af832e29d84839f76911f92476af6888cfe1e7f1c2247eae14cd5d90b

  • SSDEEP

    49152:IzJwQ/MtJZiWzfjiJjeFbzJXkDivsqshXDnvzL9LuTlB2QKweSTc:IzB0tJZBjiJjEJ0DivsThTvVCTj2adA

Score
8/10

Malware Config

Targets

    • Target

      newuimatrix.exe

    • Size

      1.9MB

    • MD5

      e025931a832d70e733c262be974344c0

    • SHA1

      cd22c4e879d0afe30c9ec3b32fb70c5030d4c4dd

    • SHA256

      e756b2bfaf02ce9ec27d5dfeab5676b00c37977d70eabb8a257de341cb319ba9

    • SHA512

      f32adf6cd5264b632541a882f5ab210c83303131cc5f4e23f8bf2c5d36a76323b152d6810a266780008088f48d476dcdd5a011fa95ef77f34275241125ebfafb

    • SSDEEP

      24576:+sLsqK1dQZYD7fQJmdLATYcLLkauMVXfjjHllVQu769bqAF6KpCffWGt1NHlt:GjjgWTLilRuM1/lB6mKQeGN7

    Score
    8/10
    • Drops file in Drivers directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      olduimatrix.exe

    • Size

      1.7MB

    • MD5

      980ddfdcc239b7ed4a525d08b62dea6c

    • SHA1

      3d15cc4ba25c88be7bd253d757349899f39dd5de

    • SHA256

      a9de575eff02f40d45172637b59cfb3f82e3a90c7ee6ef655b2b7034659a2821

    • SHA512

      24222b4b06094f7fc1e507a8c1d3e7f6114068985db851dfdad9c01f5cad0982433135d3cd29d1dc6ab8ca7ef497204bb5799719efdfe67602e33e9925cd9e4d

    • SSDEEP

      24576:0vpa5VbRIsWORo24qSpIifm3tLy4s4sb3c9Ho3FfbOKYJja3z:pzKKEpIbGzb3R1fbYJjk

    Score
    8/10
    • Drops file in Drivers directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks