General

  • Target
    442.rar
  • Size 75.5MB
  • Sample260509-a2d3jsb19r
  • SHA256 fa8e7de0f6b390fa155821db04bc39f016f2ee81fd897a75e24210fb2957b934
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      442/Simple Checker.exe
    • Size 24.9MB
    • SHA256 afe46999748f64442631212d001564f04af2526060f914161d25992e619e3802
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      442/skyline.dll
    • Size 16.5MB
    • SHA256 ee164a9ea084d7a775df11b694ecdaffa3fb3ab0a4f1edf718c8c726d01d07dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      442/skylineloader.exe
    • Size 13.5MB
    • SHA256 98692048fef03170ab43379f01b18173e692050ccef61eeb18b5e0e5ca15b7e3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      442/w64ms.exe
    • Size 26.2MB
    • SHA256 30baaf04f06726e3a6f59c2fe1ad02400aeb7725d6f5cb429a357a9d77cbd24f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Target
      442/w64ms.py
    • Size 4.8MB
    • SHA256 7cb302b223b3e8abbe31ca48bc66e14c906fc2e39ea5b41b1fa4e7d7872f1feb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks