c85d1761847bc4bc7b6f54a8c01586508c14b729c908d2438c9406556611a259

General

Target
Release.rar
Size 65.3MB
Sample260903-v5ajrasdma
SHA256 c85d1761847bc4bc7b6f54a8c01586508c14b729c908d2438c9406556611a259
MD5 b28b11c68d77bf72de9beb3412b11b5b
SHA1 d3b614205641c483260939389aa59019260b1493
SHA512 f5f9bfaba8fc7e4296d71567a699170be981c4650a3c861e649e6091061f60e3ec36bd022033105694cf85f487c25fce6ba50402fb084733f682478cff839dc8
SSDEEP 1572864:/VPFRHvv9S3l1FbsHfGXNwreyniH0WHc1DuZ/9wrYQkYPEDx/3ss:/Vd5v92zFbs/GfH4K/9wr68s
TLSH
T10AE73367079B07D784AD470544BD98AC82B3C70B167CB21D4A7B9D31E952B86FCB2CAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  Abyss Launcher.exe
- Size 24.8MB
- SHA256 0671b293a31219f3688383069d8a2a2368bd5ae22715e920f1e39d4517fe4610
- MD5 da5d72e65cfa8aa949e1c2bb664fb8cb
- SHA1 1db15d2980f49e39bb4a3ba9a0720cd1e9acdfe2
- SHA512 cb326e947d33475f113b511913e61c163c6bae394ca5c59969580785b19bd48d586a305e798c29e40d21f857ce23226be1d75172f9df8500dd8864174ff1ac3e
- SSDEEP 393216:BXB0JPqzwmWj2se5+BXJyipqbMd5bLk9Pzc3EENU0Pd40U9nXN99juxBg2SffE:B9zz1eXMq6C6kfU0F4F99sJSf
- TLSH
  T11B4723D356D522E4E393CA0987CB238793C17297EA97890D39CB68032521D97DB47E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  AbyssAgent.dll
- Size 24.5MB
- SHA256 163aad259483d6ee29b8cd33dac750466d4271daad3ef3d9007ae543acc5f582
- MD5 53168a770f6a01a8d6824df101932280
- SHA1 12873013ea7af027337b77789296c896c7f99690
- SHA512 899f3a76bbb4c8270c94a40f1573ddeb9d2d630777028e568b4b3597163a34d87284e7618c0776086e42d9d4dec072de11c800c7504b5774ff89ee29d5490a17
- SSDEEP 393216:TqeybG/NuqUhfhbzC7k9bPA5IbGpTV6IY9JvzfCYM0620wzk:TqPbOPOfXLKIbGb6IY9J6aTzk
- TLSH
  T1394723E285E113F8E7938A08D29B2397D3D1315BDA9A951D36CB6C031530DC79A87E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  abyss.enc
- Size 24.3MB
- SHA256 864447bb6a941b9eb8b69cfb4c665f381fec35037e2132ff09bbe81d2a3f0171
- MD5 08b3d4466f239ade84e73c231a3a4870
- SHA1 4befe5d7d3ced892586f407109ea68ac55ffd447
- SHA512 a2ad05d4449dfdf61a7e4129417131b7d695ac5f8087c065f213820ea78054e96d4fd54d5816df9ba081dfb953e47d6c01338d0fa660bb1f61063300ff65501b
- SSDEEP 393216:y3A3YP1CmTFJKAXTJFYHfGPOqiZsHDHZsnBJVJ6Kobf4AWAqhW6mi0bDg58sk:KA3W1FbjQHfGmjZsDZEFreyxU6iHb
- TLSH
  T1B44733E787520783557988838EFD06E8D471C749957D360F2C2A8D72EC8369EBDF089A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6