General

  • Target
    wildhuntermaza.zip
  • Size 20.7MB
  • Sample260924-v6c19sxera
  • SHA256 84cdce7189ba80859c75bf2634307022e87dbae1b3857c55c3204b7ae20c41f3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      maza(Copy 10).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 11).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 12).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 13).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 15).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 16).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 17).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 18).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 19).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 2).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 20).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 21).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 22).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 23).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 24).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 25).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 26).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 27).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 28).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 29).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 3).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 30).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 31).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 4).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 5).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 6).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 7).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 8).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy 9).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy)(Copy).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      maza(Copy).bat
    • Size 198B
    • SHA256 09b8bd3a44fae9e53fce45b000e88c41b87e641103dfe3f83eafb64ec691fe9e
    • MD5 SHA1 SHA512 TLSH
    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

defense_evasionexecution
Score
7/10

behavioral2

defense_evasionexecution
Score
7/10

behavioral3

defense_evasionexecution
Score
7/10

behavioral4

defense_evasionexecution
Score
7/10

behavioral5

defense_evasionexecution
Score
7/10

behavioral6

defense_evasionexecution
Score
7/10

behavioral7

defense_evasionexecution
Score
7/10

behavioral8

defense_evasionexecution
Score
7/10

behavioral9

defense_evasionexecution
Score
7/10

behavioral10

defense_evasionexecution
Score
7/10

behavioral11

defense_evasionexecution
Score
7/10

behavioral12

defense_evasionexecution
Score
7/10

behavioral13

defense_evasionexecution
Score
7/10

behavioral14

defense_evasionexecution
Score
7/10

behavioral15

defense_evasionexecution
Score
7/10

behavioral16

defense_evasionexecution
Score
7/10

behavioral17

defense_evasionexecution
Score
7/10

behavioral18

defense_evasionexecution
Score
7/10

behavioral19

defense_evasionexecution
Score
7/10

behavioral20

defense_evasionexecution
Score
7/10

behavioral21

defense_evasionexecution
Score
7/10

behavioral22

defense_evasionexecution
Score
7/10

behavioral23

defense_evasionexecution
Score
7/10

behavioral24

defense_evasionexecution
Score
7/10

behavioral25

defense_evasionexecution
Score
7/10

behavioral26

defense_evasionexecution
Score
7/10

behavioral27

defense_evasionexecution
Score
7/10

behavioral28

defense_evasionexecution
Score
7/10

behavioral29

defense_evasionexecution
Score
7/10

behavioral30

defense_evasionexecution
Score
7/10

behavioral31

defense_evasionexecution
Score
7/10