General

  • Target

    need quotations.rar

  • Size

    691KB

  • Sample

    241120-rp79assndm

  • MD5

    98482521b9a64bd0ec6e2be9d79554f2

  • SHA1

    9c2ed55a766f18a13afcd6ef66dd1bcbc2398828

  • SHA256

    6dec7b9d4d10e85d3e95edaa572392392a74bbec93320222d39694ff0787b378

  • SHA512

    5df2d0957c35a01eaf57185fff4808d83f82f3030ca407e2b24b38f30b970d06f730cefb2b18349300f942c2c19ef0b0f458f5539d45057a80db5ccef236b7ec

  • SSDEEP

    12288:WL1kNKHEeem5cd3EULfwVb0QvsvrQ8xgQFUf/8FtRFM77aH//qsV95KfAuOJxT:YH7lULfSQzU1n8Fa7yS0Xuo

Score
5/10

Malware Config

Targets

    • Target

      need quotations.exe

    • Size

      1.2MB

    • MD5

      2b4391106cb993ad3fa94fff2d39c70c

    • SHA1

      cc46179bcd3b71e6ee6a08d64cb2c1110cb08535

    • SHA256

      45a9ab6797cc7d6ea37308be07621d172f52d59d82ab5bb10adba5ca4c598a46

    • SHA512

      93e196b7214d8a605d95d884f6200affcdd8ae909e81aeec6bf0505799c448949624ddf25a9b0286e433febd81487f4b2b9c92d61c809a41c8ba15b74f77a944

    • SSDEEP

      24576:Ytb20pkaCqT5TBWgNQ7auxfOdknzcWCd/Xd106A:hVg5tQ7aux2dknzcWCdPdi5

    Score
    5/10
    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks