General

  • Target

    CellikRat 4.0.1.7z

  • Size

    312.4MB

  • Sample

    250207-2pv9vasrfp

  • MD5

    9d602c95fc1fa17dfc8fc10071849b6b

  • SHA1

    a1f9f65f7789ee61fe0fd2b0287ce9e870e41dda

  • SHA256

    0ca290414a9c534768b3d2f227f34f4e7e5847e8021074c33e19012e7451c99a

  • SHA512

    efd8c296510986e5f8942e13551b06608cc926f16906af10994d9a691ecfa95293a59af434de8c81cb78f774077fc19099607eb2b23fd382aff347e504e0a10d

  • SSDEEP

    6291456:bt89et6TpL2RyM/iwVVE3BHlBlUyFp1P5NpoZYsq/M1lL5:p89f+YwVi9lBqyFSY/M1ll

Malware Config

Targets

    • Target

      CellikRat 4.0.1.7z

    • Size

      312.4MB

    • MD5

      9d602c95fc1fa17dfc8fc10071849b6b

    • SHA1

      a1f9f65f7789ee61fe0fd2b0287ce9e870e41dda

    • SHA256

      0ca290414a9c534768b3d2f227f34f4e7e5847e8021074c33e19012e7451c99a

    • SHA512

      efd8c296510986e5f8942e13551b06608cc926f16906af10994d9a691ecfa95293a59af434de8c81cb78f774077fc19099607eb2b23fd382aff347e504e0a10d

    • SSDEEP

      6291456:bt89et6TpL2RyM/iwVVE3BHlBlUyFp1P5NpoZYsq/M1lL5:p89f+YwVi9lBqyFSY/M1ll

    Score
    7/10
    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks