General

  • Target
    emulator.exe
  • Size 2.1MB
  • Sample260930-ymrl4a1t2p
  • SHA256 7c5256b1ce71ca039edcd523ed6711ea740f3e5088aabaabab43b346bffa89d3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      emulator.exe
    • Size 2.1MB
    • SHA256 7c5256b1ce71ca039edcd523ed6711ea740f3e5088aabaabab43b346bffa89d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops file in Drivers directory

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks