Overview

overview

7

Static

static

3

XD.exe

windows11-ltsc_2024-x64

7

crack_attempt.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    OceanWin Spoofer.rar
  • Size 35.0MB
  • Sample261017-1pre8azyey
  • SHA256 7d0911cf26b32b4b77de8072be5b2eeb6f5bbbe981933c5643a0dd596dc3358f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Targets

    • Target
      XD.exe
    • Size 13.8MB
    • SHA256 68756011ba8e14bef18e188b2a5f5dccbcb0d6c4aa552c99fcde41887f828175
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoverypersistenceransomware

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1
    • Target
      crack_attempt.ldr
    • Size 26.9MB
    • SHA256 73f555f1c1c64c713791393cf2f10ad24b6f5b1f94bc9c207c03cfe9bb5a63fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks