895aeacdc8efecbb30c1c077e2148c498c1e326ed04d1aa05021893b9181267c

General

Target
895aeacdc8efecbb30c1c077e2148c498c1e326ed04d1aa05021893b9181267c
Size 8.6MB
Sample260831-kk6rcayclf
SHA256 895aeacdc8efecbb30c1c077e2148c498c1e326ed04d1aa05021893b9181267c
MD5 13077c337f5d3f92fd3c1fe143d9698d
SHA1 f4f1966447121305a584f6d3d801be7048561d25
SHA512 0fd728bc83cb6cb5234040c79b731a282ad0996d2baaaa4472f89fe64070208e529b23229d2537af255859b4b0af16aa64f892649300c9e40c3433359c2a5469
SSDEEP 196608:yly5WJSUzpAj8pNGJ//MJ8ply5WJSUzpfj8pNGJ//MJ8C:ylaWUUFFpNU/kJ4laWUUFApNU/kJL
TLSH
T12A9633DEBA112C79FD241E39AF57A8EAF1469FF46131B65923313D2D23103C6C61A09E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery

Malware Config

Targets

- Target
  [email protected]
- Size 703KB
- SHA256 e14c6f9ffb5b3930dd27c32e3edb6cd8a7f64c9905a78399723ac046614504ea
- MD5 e3db07c663706e3b02fba9859f5daabf
- SHA1 9538076721956b99c5cadb1debc29a25306d6c5c
- SHA512 36a44be5992cdb9b6d001b56bcfbc285addfeb4c828975b885a6fa562d014aec8febd214bc318fd880bf9332419c881bd1f9e04657b06f311a7d46df3b23d49d
- SSDEEP 6144:q9C/ZgzOK+E6rZ4qr+/Iml0eTn5APeFZ6lxz0hDlWHpOCYR:zhwOK+FZH+/I/cn5Ue3MxDXe
- TLSH
  T16AE46C51A640B033E4AE32B125AEB6923A7CBF704F1265CB97D42D5F1A746D27334B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  galsisz.exe
- Size 4.3MB
- SHA256 2199e17b08ed258f15f170ba413e38534d405c4c4cc4644a5655aa2c718373e5
- MD5 505c21b43a20e977e25779b96ca6a87e
- SHA1 6e1bced71b70cb53ac2e4d15fe00f3496f7ea193
- SHA512 d51f2ac8508fa0116d808cdd41ab022b9864c13151a32eea154698c768a1a555b608bc0128b556a1861c785ea43b57e673bd068444fa9bd05bb5eaae2e63c465
- SSDEEP 98304:j6nDyp15qHWeud3sTVPxoM0NJRAr6oDApk7oSMbfqnD:ODs5qHWeq8TVPdGJRgxfLMb6D
- TLSH
  T149262348B3B92904F9F31F36DE7250680B67BD657131E66C2324369D2631B809EE673B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral3 behavioral4
- Target
  galsisz.exe.org
- Size 4.3MB
- SHA256 67fbf46fb4eadf7c8fa2a0066d02c0995e4ca2dce8af84e104edd4864e2964cb
- MD5 e50c96ceddaa31601d2679b3fa6181af
- SHA1 708ab1d0bdf5c76c0fd8f2cb947c9e14bc075755
- SHA512 d11bf4445bd760282783081821df1c4c1f2c53733509cead350efc58e69e518351be09726f78ede7cf3dc04e17ba5af8e3aed46a92cc2b265d4e55f5bd0bf60b
- SSDEEP 98304:j6nDyp15qHWeud3sTV3xoM0NJRAr6oDApk7oSMbfqnD:ODs5qHWeq8TV3dGJRgxfLMb6D
- TLSH
  T17B262348B3B52904F9F31F36DE7250680B67BD657131E66C2324369D2631B809EE673B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6