General

  • Target
    AttackClient.exe
  • Size 11.0MB
  • Sample260815-xfczpasbqc
  • SHA256 b8065963666921a4f5c0eb5c6ab7c2916a9162d4267792c28d7d9417f05299a6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AttackClient.exe
    • Size 11.0MB
    • SHA256 b8065963666921a4f5c0eb5c6ab7c2916a9162d4267792c28d7d9417f05299a6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks whether UAC is enabled

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks