16be9d23374fd237cf73d9e7dc20888d31e86cdec049a304fbc845cf81c0fede

General

Target
Release.rar
Size 5.4MB
Sample261102-dn56naew3v
SHA256 16be9d23374fd237cf73d9e7dc20888d31e86cdec049a304fbc845cf81c0fede
MD5 917382a86ab1fd4d3680926b87d69192
SHA1 24be0e249009b5a1408dd0245789dfd1fe9712fb
SHA512 aff35190da7e418f8f6b4dc0d638f0e015075a38af31c68c7022c711ea79da2ded5f98e551874bce80050afbca91df2d01e1b773cde30385cba0dd34f56c335c
SSDEEP 98304:hAp2qDcXviNlIbsVfErJG4ESGIzeTpoRg+AYpwNGd2gPdsmByyaoU2JKv6z/URk3:q/QXvwlMyMr44qvNSAgwaJimByMJOS/d
TLSH
T11246331A29C6DCD8C7AF58D864B72D76122CF6FF97C72DD2C7D481028AC0B4329E6586
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion discovery

Malware Config

Targets

- Target
  libcrypto-3-x64.dll
- Size 5.1MB
- SHA256 a6cdd8ff16231be0307875b9c6a7b2555a6f7e6b98909a5018b63ee8f174e426
- MD5 20bd9ae78f317f80debbfef929bf9068
- SHA1 ea379bff896c3c44094579fcf2c4b9f0be6f3d45
- SHA512 a55816582399aab1fa674bbd8e70be3edbbfa853368d299da58288e521355a01febdf10513919ed8cebc46a29074bb799e670191cfbb93ba822a1460f4777f86
- SSDEEP 98304:uzsopzbP2Y8BHEY3kEFl9T+0ij0R1CPwDvt3uFlxC9qV:uzsopz98BHEY3kEvtpR1CPwDvt3uFlxJ
- TLSH
  T1FD368D69B5BC0049E87A81BDC2876227EB71B92563B057DF6A284AF50F23FD0177E740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  libssl-3-x64.dll
- Size 848KB
- SHA256 05a7d8138773891faf7565d2db80167ad7e07101eea4c2c440884618f4bd3550
- MD5 9d7d01bd40d368eac4846349401074f2
- SHA1 85ac452330218cec506926ddd1d888271e2d1337
- SHA512 6957eeed4219653384aa8f8f1d90dbff01b491478ec56e9f1fa53508232d2e969b66b6b1ab726700b0a48491839cf5b8c71b5dca363e14f221ce3e7a7acca0a4
- SSDEEP 12288:nwHuL/5/fGpb2baV28QVIWKVur9QuFPs6NcTR2NOUAmJt:nww5Wb2WVMVaurOu5sCcl2NOUAI
- TLSH
  T1D6054C65FBB8119CE862D17C86D34613E6F6F4163370AADB0B248A392F637E1263D354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  raid0.exe
- Size 5.1MB
- SHA256 9634541544074e581a02d41aafa19402a2fda8fff809231693a84e4dfac01209
- MD5 9ae9e957211d33c344fbac407d01467a
- SHA1 f0abc846f2b62006f80f738a81f42fbb6f899021
- SHA512 0e649789dd809068b531da7e391b5f3c3d9cd74ec744d67307717397612f402fe47690a0df5aa2b25b6690857f90c2b8faa03910d0ce2c3bbaa0199ac04a50b5
- SSDEEP 98304:NerW++X/zz4BDFTzjCVwJ2TjLgRo9EbWpZsOKQ:UW/YBDF3jCVwJ2TjLgRlCDsOKQ
- TLSH
  T155366BF0571675C6E47BD638C2F8B935A07633F393CCDA1A9FACCAC6296521348D9881
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

defense_evasion discovery
- Suspicious use of NtSetInformationThreadHideFromDebugger
  defense_evasion
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

1

T1622

Credential Access

Discovery

Debugger Evasion

1

T1622

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6