General

  • Target
    GOD MODE escape tsunami
  • Size 69B
  • Sample260807-29be6sdn9y
  • SHA256 afd83e81ceb20eeae7b1e135eddb5905e6b0e29cedfbd7a2c8a225aa73983554
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      GOD MODE escape tsunami
    • Size 69B
    • SHA256 afd83e81ceb20eeae7b1e135eddb5905e6b0e29cedfbd7a2c8a225aa73983554
    • MD5 SHA1 SHA512 TLSH
    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks