General

  • Target
    Crack Fix.zip
  • Size 10.9MB
  • Sample260813-lp4yzseq6t
  • SHA256 47c4cb1c4b99b62529c20060159a6ba5e29253eb565b7b37ec4ed2003a08cb5b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      freetype.dll
    • Size 345KB
    • SHA256 1564976acd77fce6ee578d2949085d578c9bc223aea746afb62d0f8967ba3e64
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      xzblib0.dll
    • Size 11.7MB
    • SHA256 c67a1b2a7a79357e12d85dd51ebb7b54cf53087e45268b8daaaa7bc4147c3c40
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks