General
- Target GOD MODE escape tsunami
- Size 69B
- Sample260807-29be6sdn9y
- SHA256 afd83e81ceb20eeae7b1e135eddb5905e6b0e29cedfbd7a2c8a225aa73983554
- MD5 fb2000afebeee1b97f403d6a7166bddb
- SHA1 685b7de2956c7e18c2a41a91f672906d5474b1b7
- SHA512 c9c054b3105562aaed8b5cc71986842eecefc66d262f4d6f702088c3ea7ffa81a0f415ed49e29793aebe7bab5db15f6f23a832f7f26722385e8da797fd3edbf8
- TLSH T1A1A0222EE800A33E2AB20080088BB88CCE02002E0A3380B2C00B20B00C202A3A030020
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
GOD MODE escape tsunami
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
GOD MODE escape tsunami
Resource
win11ltsc2024-20260709-en
22 signatures
900 seconds
Malware Config
Targets
-
- Target GOD MODE escape tsunami
- Size 69B
- SHA256 afd83e81ceb20eeae7b1e135eddb5905e6b0e29cedfbd7a2c8a225aa73983554
- MD5 fb2000afebeee1b97f403d6a7166bddb
- SHA1 685b7de2956c7e18c2a41a91f672906d5474b1b7
- SHA512 c9c054b3105562aaed8b5cc71986842eecefc66d262f4d6f702088c3ea7ffa81a0f415ed49e29793aebe7bab5db15f6f23a832f7f26722385e8da797fd3edbf8
- TLSH T1A1A0222EE800A33E2AB20080088BB88CCE02002E0A3380B2C00B20B00C202A3A030020
- MD5 SHA1 SHA512 TLSH
-
Executes dropped EXE
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Network Share Discovery
1Process Discovery
1Query Registry
2Remote System Discovery
1System Information Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1