2b1c68d6f3c342ddd502bf25d655d4dda1c3073c49fc134c0f55c181b768f078

Sharing

Copy URL Twitter E-mail

General

Target
КуосitуХ64 (1).zip
Size 4.3MB
Sample260528-ygrpxact4v
SHA256 2b1c68d6f3c342ddd502bf25d655d4dda1c3073c49fc134c0f55c181b768f078
MD5 740ba03b16dd7ccfa1ca7fc6614b2f76
SHA1 907f0b150b57cf44412cf60f0ab11ca454167497
SHA512 c38d72a83d62971a5a22b28d3175ca006b9163feb5a53ca6d7f587a0cad252f5005b55f8acada555639ed51041434118d59c229906d48c6fa7c35a47c7182681
SSDEEP 98304:WgU3U5mxag+p4XpAhRGvPigl52PF9ekR2gGReUFyBqq2oF6zfIeCPht9A2dXG:zkUgxaTp4iIyglEtp/GReUFPtpzf+Phu
TLSH
T1582633BABED1263C9EE39A6D480207AB3601BC101CB755EF3ED240C545C6A7DB8E527C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Targets

- Target
  kсtХ64/locales/resources/app.asar.unpacked/node_modules/btime/binding.node
- Size 118KB
- SHA256 98c51303c38dc03faeeba13f26fa3c6645d0c1a502b8a5d28177ce015dacf35f
- MD5 13a2579ed95366185a6247c9e4b9f0cc
- SHA1 61fef12da622484e44b3c9ddcd61706c9af00aa0
- SHA512 7aae5a45f5333355c81e4a7468d40c9d814a1b242c99a39747fea9b66e277dd1060bda290fc980e958beccab2ac0232fc4aba078426ac5ae39c19968ae8f58d0
- SSDEEP 1536:OMwHUFyUCyB7KdX2teZOpSPtvdO+tYLZI2mAq+J6sWyd09dlgh7tBrdO6t2:hwjUCyB7eC8OpSS+tYLZI5+NMKFdO6t
- TLSH
  T1ECC36C57B2E541BFD4768278C9930A45D3B2B82507309BDF07A4425A1F237E1AE3EB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  kсtХ64/locales/resources/app.asar.unpacked/node_modules/get-fonts/binding.node
- Size 125KB
- SHA256 149bc3824ecbf68f7a892a311e77548ea156963b88db0590063b50725c9d883c
- MD5 eeb1d1ea9fc3f870f292161cfa79850d
- SHA1 ea4f4324245f9f4d6280ef285151f688221d6023
- SHA512 795269fba2737ca51d61bb0f6e674c8ed45f2590a48d1dbc53adae9a85b5565e372de6e2a888f038660173f6f4fe0ecda293c441415296e79097c261c452f254
- SSDEEP 3072:cd5+N3E2MosoJCakr0dHPAMMMtrAfz9MrRAG:yIxMQQakr0xPSfzirqG
- TLSH
  T1E4C35B1B73A440BBE4778179C8531A05E772B8610B71DBDF07A0429A1F637E1AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  kсtХ64/locales/resources/app.asar.unpacked/node_modules/vibrancy-win/binding.node
- Size 118KB
- SHA256 094bfeb0692885f1e56bb363e1065099eab48a7988c8603fd6a3fb49ec88b09c
- MD5 6c12c930f974e5bc7872b58964f42359
- SHA1 805c5c899c32535d2ee8b2bc12deefe5fdaae566
- SHA512 f46c416e3f33e0526c2d4cb3df738f7c9b11fece350b90ca9613e5d86bae7a363dd20b80d62f5745a9d51773b655199537b09fcf47acf226f35002f39f1596d3
- SSDEEP 3072:/WKjx2yp1tLqA1HB4kdeRqGmX5EMMi6leGS:3xBPVf1HB4kER4UFhS
- TLSH
  T18AC35C1BB3E540BBE1768138C8671A15D372B8214B61DBAF13A4465D1F237E0AD3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  kсtХ64/КуосitуХ64.exe
- Size 2.4MB
- SHA256 68211b9c6dbdbb03908d53cbc221383e3169c5358a0b53d9faaa81c6aa7e7c5f
- MD5 aa4cc24d403056c9fa1da897121321cb
- SHA1 8c0789d5c4507c55d902fa760ac632fc6ad25e44
- SHA512 b9cf787c4bf8736754d3d472d5e7264d344cd8465be92a7416511f0a4518a1936567d0aaab71713ea641f8b2762a73eb5775b31634d8d5a2f04f22e099220a4c
- SSDEEP 49152:A7iNtNSJkrwkaphF6hNyPWxd2N7xOOkCXbqjT:AaoYWpHCyPg2N78OrLMT
- TLSH
  T1C3C59D8B6CE04DE6D0A6637289A761817F71BC080F7263C72E9073782FB6AE45D79744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral7 behavioral8

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8