General

  • Target

    ienstal.exe

  • Size

    32.9MB

  • Sample

    241121-qbppcswrgk

  • MD5

    ed5bd508a869828db5b9b4c51b5f24f2

  • SHA1

    877fb8789d619612e9d4b59d69f2d031cfda4c9d

  • SHA256

    7201f377a72daca560733a6755478c5e153bc58c816fb17ab2faa2e83f9f74a4

  • SHA512

    0907b4bc5527b1e8883d4f5000fa7389a0caac695c53b7ee43df04046ea81fc69a9b0d86159a6897ce0d7478d743142f0edb3dd7102d67db59ae55967e789f72

  • SSDEEP

    786432:CgAEd58jHZRjorWH070sKQ27f1PyQH7jedjSn:Cg1dSrZRjorWH0wsKNf1qQH70S

Score
5/10

Malware Config

Targets

    • Target

      ienstal.exe

    • Size

      32.9MB

    • MD5

      ed5bd508a869828db5b9b4c51b5f24f2

    • SHA1

      877fb8789d619612e9d4b59d69f2d031cfda4c9d

    • SHA256

      7201f377a72daca560733a6755478c5e153bc58c816fb17ab2faa2e83f9f74a4

    • SHA512

      0907b4bc5527b1e8883d4f5000fa7389a0caac695c53b7ee43df04046ea81fc69a9b0d86159a6897ce0d7478d743142f0edb3dd7102d67db59ae55967e789f72

    • SSDEEP

      786432:CgAEd58jHZRjorWH070sKQ27f1PyQH7jedjSn:Cg1dSrZRjorWH0wsKNf1qQH70S

    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks