Overview

overview

5

Static

static

3

run_defaul...32.cmd

windows10-ltsc_2021-x64

5

run_defaul...32.cmd

windows11-ltsc_2024-x64

5

run_syswow...32.cmd

windows10-ltsc_2021-x64

5

run_syswow...32.cmd

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    MALWARE_DO_NOT_EXTRACT_clickfix_midw_betland_google_cl_triage_upload.zip
  • Size 10.0MB
  • Sample260702-dmw7csbt91
  • SHA256 c742aff6f36d2d6b5ec928d98c66089647c3a49e0657e40b45d059c011804ac0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
defense_evasiondiscovery

Malware Config

Targets

    • Target
      run_default_rundll32.cmd
    • Size 72B
    • SHA256 29c12b50516222fd92fc5538c0f2b8f78489d2a696a73ec370465119e8128126
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    defense_evasiondiscovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2
    • Target
      run_syswow64_rundll32.cmd
    • Size 90B
    • SHA256 2bc0ea6419d614f3ef6424c9fb0737e66edd806ca1d11bd20aa35b165bf03d0a
    • MD5 SHA1 SHA512 TLSH
    Score
    5/10
    defense_evasiondiscovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks