b595b68250afbadddf987693c116beb8a3e832b1980782bc5e28ac4c485fe940

General

Target
b595b68250afbadddf987693c116beb8a3e832b1980782bc5e28ac4c485fe940.exe
Size 934KB
Sample260703-3ev2rsg171
SHA256 b595b68250afbadddf987693c116beb8a3e832b1980782bc5e28ac4c485fe940
MD5 de45ac1412091d09d46430db133a905f
SHA1 0f0d0f31a9a19304883da5c3ed502b9894506bdb
SHA512 9410c947a8f30fd8c298d7b692bd8e0b8b17b07048f6b8b79d3cbae40aadfa4b6c59a8956fb705e994cd975b9cd12eb4cbd5363fc9c006a62174909276779007
SSDEEP 24576:daSN9/uarj4tlWqVeFhyDD8QlE9uAchcaIdb+p0H1yCvL:nN9/stlW1+gQe7aIdKp0HV
TLSH
T1171522443398DE7BF9224EB4C039D3F50964CD09A9D15203476E7C9BBDB2261BAF92C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  b595b68250afbadddf987693c116beb8a3e832b1980782bc5e28ac4c485fe940.exe
- Size 934KB
- SHA256 b595b68250afbadddf987693c116beb8a3e832b1980782bc5e28ac4c485fe940
- MD5 de45ac1412091d09d46430db133a905f
- SHA1 0f0d0f31a9a19304883da5c3ed502b9894506bdb
- SHA512 9410c947a8f30fd8c298d7b692bd8e0b8b17b07048f6b8b79d3cbae40aadfa4b6c59a8956fb705e994cd975b9cd12eb4cbd5363fc9c006a62174909276779007
- SSDEEP 24576:daSN9/uarj4tlWqVeFhyDD8QlE9uAchcaIdb+p0H1yCvL:nN9/stlW1+gQe7aIdKp0HV
- TLSH
  T1171522443398DE7BF9224EB4C039D3F50964CD09A9D15203476E7C9BBDB2261BAF92C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6