2020622050d607225371b378fc3e71afbbb23f8b521acbac4f02588f20fd9b16

General

Target
Real_v2.1.18045-1.zip
Size 2.9MB
Sample260804-ydb52syekb
SHA256 2020622050d607225371b378fc3e71afbbb23f8b521acbac4f02588f20fd9b16
MD5 37ab6683778f7c4b1d546ffc8da463de
SHA1 25940a3c6a66cdbbcb7c3faa676626c6e144ce93
SHA512 481deb6e103fa57af131b58f34c794e7c16e467cfcb011117159b7f4418be90fc1f92439b7dd35d93357992d0644b51366bf20c6ef1e063691fa23dbe90f2ecf
SSDEEP 49152:0H/hROONzfgckuyzBZ08weO0eMKvOrnKj6DBWQ8XOl/LTF/tBST+8zt9rxKPlMSq:cmONHy9a8Y0XpnzV8+l/LTFFBSS8zt9H
TLSH
T12BD53340B788EA59A425AD674AC7797D13932DB791501F4ECF83B941238309E83BF4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Real_v2.1.18045-1.zip
- Size 2.9MB
- SHA256 2020622050d607225371b378fc3e71afbbb23f8b521acbac4f02588f20fd9b16
- MD5 37ab6683778f7c4b1d546ffc8da463de
- SHA1 25940a3c6a66cdbbcb7c3faa676626c6e144ce93
- SHA512 481deb6e103fa57af131b58f34c794e7c16e467cfcb011117159b7f4418be90fc1f92439b7dd35d93357992d0644b51366bf20c6ef1e063691fa23dbe90f2ecf
- SSDEEP 49152:0H/hROONzfgckuyzBZ08weO0eMKvOrnKj6DBWQ8XOl/LTF/tBST+8zt9rxKPlMSq:cmONHy9a8Y0XpnzV8+l/LTFFBSS8zt9H
- TLSH
  T12BD53340B788EA59A425AD674AC7797D13932DB791501F4ECF83B941238309E83BF4EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1
- Target
  Real_v2.1.18045.exe
- Size 683KB
- SHA256 715b4174065916a6412f60b3c10664b323dc737fd717ab09627083be34626fe0
- MD5 6669e10c960f6c2297bcd3d5a27412aa
- SHA1 73bee544b24312d0057d9ce5e62daa9f73243d00
- SHA512 feb1e93aed3f1a0ade6e6ab169af46ddd438aa80f6667fb24421d2f0b7da1c4a4902438421079a75eecfc9a3347c3ebe7f62b88ea9e67a9c951954d8555ea497
- SSDEEP 12288:tiGbyLR32C4NHhZoLCZcvDaLgf5pB6Nwi5//E7soazN0uahRg:MGboR3P4NHboLCevWLGL6//E7sTN0hhC
- TLSH
  T1ECE48E2AB3E401F9D1B7D276C9535A26FB71780A1731CBCF03A046562F276A49E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral2
- Target
  mpclient.dll
- Size 7.2MB
- SHA256 4a43802671eef1e0839bf5d04fe8b88cb925bb5f7bf949f71d0bd8843184d69a
- MD5 aa34418e853bfb1ae7de5921bf282b40
- SHA1 5eb598162f70e82892e35b9f849f63fdefe8662f
- SHA512 9e033238b97f7c9b115a7948267c0b08d1f5db44c881ca8db6d38096de578c51a284bdb69edfdfcabd0a354e3294430b62dee994e3959861d6d0168935132476
- SSDEEP 49152:Pn9DdxHY8IJhyRqSkO9WfqqQsOPNiTdPRQqATeWzbtet4ZXQkh93oR5XxIffKnO6:PRbkPyfAREyq9hGR5hVO8phrr4c1d7X3
- TLSH
  T150767C1B7A48A861C198E63DC47B5309A564BC5DC73433E32E623EB4AF717C26E79B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtSetInformationThreadHideFromDebugger

Badlisted process makes network request

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3