General

  • Target

    newuimatrix.exe

  • Size

    4.1MB

  • Sample

    250415-yggjyazpv5

  • MD5

    49b79a318c7cf4bcf6c3f44d0ed260f9

  • SHA1

    790e8ba03760de49f818a716cd47531242d3dea6

  • SHA256

    887b773172839a3149df2e67e8f6746a1beaef05c98718f525089f82d4eb15ff

  • SHA512

    a400dd49adc1915d7322602c289c94488768b23c5553f14a87c78e68a4b9cacba65db55e0ee4cf3b11b97be4acfde3ed6d364b08a6cc79aab1d5283abb068d60

  • SSDEEP

    49152:sDzSc87HjkdTn4DglwdOc+gtFY4gvojvb6PYO1iIVj6ut0CsMXqP4IzcRyOpSlvG:6Vx9Aazj/sMXqP4Izte

Score
8/10

Malware Config

Targets

    • Target

      newuimatrix.exe

    • Size

      4.1MB

    • MD5

      49b79a318c7cf4bcf6c3f44d0ed260f9

    • SHA1

      790e8ba03760de49f818a716cd47531242d3dea6

    • SHA256

      887b773172839a3149df2e67e8f6746a1beaef05c98718f525089f82d4eb15ff

    • SHA512

      a400dd49adc1915d7322602c289c94488768b23c5553f14a87c78e68a4b9cacba65db55e0ee4cf3b11b97be4acfde3ed6d364b08a6cc79aab1d5283abb068d60

    • SSDEEP

      49152:sDzSc87HjkdTn4DglwdOc+gtFY4gvojvb6PYO1iIVj6ut0CsMXqP4IzcRyOpSlvG:6Vx9Aazj/sMXqP4Izte

    Score
    8/10
    • Drops file in Drivers directory

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks