Overview

overview

6

Static

static

3

5C585348E37.exe

windows10-2004-x64

6

5C585348E37.exe

windows10-ltsc 2021-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5C585348E37.exe

  • Size

    36.2MB

  • Sample

    250115-x3pa8stnel

  • MD5

    63d68eec0be48c878d8289e3b701cb1f

  • SHA1

    37300bfb9d21d6379cf24fa4c01de2376dbec7f1

  • SHA256

    838780b532630a4ebc10dea2f26e80f817a4b50267c7bcc46ac110c6d4ef32c8

  • SHA512

    e6cad1e4bdd9736bcc17f40ea264bc46d4f82745377da90dea24abdbe2b245b9cfb39675d1905d887f3cf23eef71f92ccd4d47bdcdd53d048c16091cdce7af2d

  • SSDEEP

    786432:PaqDrWOWY01RvzCa/r8n+c3qDFx/7JCXoTivaxzG+vbR6/tdCoXVJ5Ht5yL:bDxeRbtCXSaax6aRytdCwX5NYL

Score
6/10
microsoftdiscoveryphishing

Malware Config

Targets

    • Target

      5C585348E37.exe

    • Size

      36.2MB

    • MD5

      63d68eec0be48c878d8289e3b701cb1f

    • SHA1

      37300bfb9d21d6379cf24fa4c01de2376dbec7f1

    • SHA256

      838780b532630a4ebc10dea2f26e80f817a4b50267c7bcc46ac110c6d4ef32c8

    • SHA512

      e6cad1e4bdd9736bcc17f40ea264bc46d4f82745377da90dea24abdbe2b245b9cfb39675d1905d887f3cf23eef71f92ccd4d47bdcdd53d048c16091cdce7af2d

    • SSDEEP

      786432:PaqDrWOWY01RvzCa/r8n+c3qDFx/7JCXoTivaxzG+vbR6/tdCoXVJ5Ht5yL:bDxeRbtCXSaax6aRytdCwX5NYL

    Score
    6/10
    microsoftdiscoveryphishing

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Detected potential entity reuse from brand MICROSOFT.

      phishingmicrosoft

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks