048cf068866ad05ef0cc5ba042775b8e1cd7ad1a9d4cdcd98d68dd77b85af79d

Sharing

Copy URL Twitter E-mail

General

Target
Downloads.rar
Size 24.7MB
Sample260806-s8vb8avdne
SHA256 048cf068866ad05ef0cc5ba042775b8e1cd7ad1a9d4cdcd98d68dd77b85af79d
MD5 fb2f169c2c78cb5dde7ffa4da2669662
SHA1 e496be944b533d9d23c6ffbbc189d54f51c714d4
SHA512 63f36aabe284c8af8ed9ac6588bcba9986d5f2472c1956bf2debfda381a85b92aa4c23b32b2a61b4b80a8ff083ff8b7b36577cc61a5ef810263cfe3b7468304b
SSDEEP 786432:hSrpyw42rMzikhnnZx9TyvMsEpbaRNGEcc:hmHdpMnMvqp2Fcc
TLSH
T179473386DC432A35CF03EA6D3C0953A75F0DE6A6D58361D60639DC718E4AF64883E7B8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion themida

Malware Config

Targets

- Target
  Downloads.rar
- Size 24.7MB
- SHA256 048cf068866ad05ef0cc5ba042775b8e1cd7ad1a9d4cdcd98d68dd77b85af79d
- MD5 fb2f169c2c78cb5dde7ffa4da2669662
- SHA1 e496be944b533d9d23c6ffbbc189d54f51c714d4
- SHA512 63f36aabe284c8af8ed9ac6588bcba9986d5f2472c1956bf2debfda381a85b92aa4c23b32b2a61b4b80a8ff083ff8b7b36577cc61a5ef810263cfe3b7468304b
- SSDEEP 786432:hSrpyw42rMzikhnnZx9TyvMsEpbaRNGEcc:hmHdpMnMvqp2Fcc
- TLSH
  T179473386DC432A35CF03EA6D3C0953A75F0DE6A6D58361D60639DC718E4AF64883E7B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  hookloader.exe
- Size 33KB
- SHA256 f8629c51bb0c97c7848425705b59a8cb887b88225dbcf518228949ce263755df
- MD5 ad100e026561d360de921a4baf47fdb7
- SHA1 3f3bf64f0824d81006535a72e29999d56ad92030
- SHA512 c36acc757b347a353014e6b1a8ad2701773750e0c3e1736d43e4c423b11f8de677480284248f055f9a99330778f4559c34b28811e93ed27e0eeb3c389eafc591
- SSDEEP 384:Do9ZbonucNXW/KubqInO05XFIJTnCr31bRGJXRfWaY2RuZoijtBKYkOlCtNRuZoL:c9Z2xNG/Kaq/AItA3dwJJWaYvL96x
- TLSH
  T118F2C72ADD2BA03BD35D8D74C6534D05DE62BCD78BE1B58FA7400CE60974AA4AB3F601
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion
behavioral3 behavioral4
- Target
  internal (3).exe
- Size 25.9MB
- SHA256 b7dc841a8ebdedd3651301da7c7ef6e56f87c5f5d452ac3c181e95628fec358b
- MD5 88a97474b28c7dc82b3637392a20b42b
- SHA1 395959e5c85197bb115a219f8660ae085e962c6e
- SHA512 15b68b7a61aa9e092f1102dd8dceaa0f90ac3154582de4d56f4ca78ad7b141ce47786c0c4c1086d8480c0f51f0950fffcec2c4f54c97352259fc7e648fe06dbe
- SSDEEP 393216:9admtQ5sfAu+gBxOCrI/IVPR4jEji7rc4vZAJpCEGQP0bDHFgCS6YPa70YV7MGyP:95j4u+gBMVqRQ7rlviSbDHyYYUM
- TLSH
  T12457339642D5B2DCCBC18640374580CE78D4A49D40FEAD793FCF8D56EA28D8E058AEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5 behavioral6
- Target
  vipexyz.dll
- Size 722KB
- SHA256 e7376b28060f02ac5720da5bf27e010c8eb3311f1c6eef5e96685ce1554e0792
- MD5 bfc791dea7bb5d1dadd59e1139b9c22f
- SHA1 0542a7e949383c9c7e82570b28381bec42cd1ed4
- SHA512 98fb1a15259a1f3577bc282965d1dc3436fa7a4a2fa1321f4ae1307394b6bf75bf6053928fbe4748ddd74c34bb999e0d817e5d1d1157bc172a47f53fd3126375
- SSDEEP 12288:OdKI0qySxtHrpkWB/3o/H3ZjfvWvumly+dOE15ldP:OdKIVygtHrpN4/H3ZjfvsumlZnxP
- TLSH
  T19AF47D05A7F811E9F1B3EA76D9B21512EAB27C850B70A5DF03E0499D1F337A0963B712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8