Overview

overview

5

Static

static

4

Guna.UI2.dll

windows10-2004-x64

1

Guna.UI2.dll

windows11-ltsc_2024-x64

1

HannibalSpy.exe

windows10-2004-x64

5

HannibalSpy.exe

windows11-ltsc_2024-x64

5

HtmlAgilityPack.dll

windows10-2004-x64

1

HtmlAgilityPack.dll

windows11-ltsc_2024-x64

1

ICSharpCod...ib.dll

windows10-2004-x64

1

ICSharpCod...ib.dll

windows11-ltsc_2024-x64

1

Newtonsoft.Json.dll

windows10-2004-x64

1

Newtonsoft.Json.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Public Hannibal.7z
  • Size 21.0MB
  • Sample260730-y8yyasfc33
  • SHA256 fd1a1efbb17aad77d2e774adef84d4f256535a139f2c228acd7934dc3f2c171f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
costuradiscoverypacker

Malware Config

Targets

    • Target
      Guna.UI2.dll
    • Size 2.1MB
    • SHA256 6d876b257a97995d21072acd44580633468516121145cc218277edc18f971030
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      HannibalSpy.exe
    • Size 20.2MB
    • SHA256 f1580f206cb55e18b9665ad35a411a77d380a0c15ccb85723cc744946d8fd9b5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    costuradiscoverypacker

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4
    • Target
      HtmlAgilityPack.dll
    • Size 168KB
    • SHA256 ab67932f6ef179e79d74278c1d00b302833f05713707325af2d5fc798770efd0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      ICSharpCode.SharpZipLib.dll
    • Size 248KB
    • SHA256 cb9c05b5a1e1db26ff43490ee26f2e02abae3f321d2dd5ddd43a68da48eab83d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      Newtonsoft.Json.dll
    • Size 695KB
    • SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks