1b9fe356fb602a26a68a837430e1727e34cba21c99bbbe9654a255020e98dd73

General

Target
1b9fe356fb602a26a68a837430e1727e34cba21c99bbbe9654a255020e98dd73
Size 3.9MB
Sample260803-en5essbg79
SHA256 1b9fe356fb602a26a68a837430e1727e34cba21c99bbbe9654a255020e98dd73
MD5 0c5a87aa12ce6b3c578743a4dd4b8ad0
SHA1 a9a5f9ad5e37d2d58c41ea853bf74772803d8ce2
SHA512 992d431f16d67e1c872a50b8bf72b19e9b6942ac5670b728c05d756151541b867d370fdfe277f53805518fd70f6f260b68390e87ecb4e1499639407118d91ae3
SSDEEP 98304:VJGSpBxmjxhYQqpRJrZ5XHvPXhP5vIGQNbrO0682DqujlnmJSnXh:VJGSg1h2ZX3XhRgGQNfOM2eujlQSnXh
TLSH
T113163390467DAF96E0A515362782E5F32D171D0D0DC4ADE0BFBB63466CBA28513CC8F9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  vlstrррrХ4096/VеlоstrарреrХ4096-v.4.562.exe
- Size 683KB
- SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
- MD5 6669e10c960f6c2297bcd3d5a27412aa
- SHA1 73bee544b24312d0057d9ce5e62daa9f73243d00
- SHA512 feb1e93aed3f1a0ade6e6ab169af46ddd438aa80f6667fb24421d2f0b7da1c4a4902438421079a75eecfc9a3347c3ebe7f62b88ea9e67a9c951954d8555ea497
- SSDEEP 12288:tiGbyLR32C4NHhZoLCZcvDaLgf5pB6Nwi5//E7soazN0uahRg:MGboR3P4NHboLCevWLGL6//E7sTN0hhC
- TLSH
  T1ECE48E2AB3E401F9D1B7D276C9535A26FB71780A1731CBCF03A046562F276A49E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  vlstrррrХ4096/mpclient.dll
- Size 6.1MB
- SHA256 6b9c58d350b593335d506080e5c9d88593d0883dd399f68e8ed0910ddb24a31e
- MD5 e378e6af8cf3fb3d0282106d70a03433
- SHA1 fd0bfb229007e998fd0902fa1852c3c01bc9adf1
- SHA512 812c6f4afc3eef98a82b2d96e3d0c9b7d7f546c3bebcf785f9384f072f74d2265f5ad6037e157d610bd8b6bd3527f685ffcd6a17002b0a81d3b8648f390232c6
- SSDEEP 49152:DDdIUhxPmBGP1pVD07AAtzk15BvH7kYkcF98H5XDEp2cs2UqZJiqzfrjRoQNcxNl:DahkzYMHoxApZeqZJi0z1ofr9XT
- TLSH
  T1E4566B03A9558C39C0A5D63E883A725AB6F8FC1D83357BA31D51BEB62F62BD05B34740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2 behavioral3

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Badlisted process makes network request

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3