Overview

overview

10

Static

static

รูป�...��.exe

windows7_x64

7

รูป�...��.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    รูปภาพที่ต้องลบ.exe

  • Size

    24.4MB

  • Sample

    200630-satev7gtls

  • MD5

    60e8c8216af0a6c159364a3cfebc1f1b

  • SHA1

    ffd81aa28975dfd4f8e09aa55863c569f6c37037

  • SHA256

    12d14cc1f1d29e131b94659bd8830ce0afe855973f36648929f6bdc7dab4b87f

  • SHA512

    8852553899c83a5d922ca78048b8a37f0a014501796044f1c826b68599365cde0f9046351bffe1f09d07707b2f5049c12dd0dc5a949da076160d7ef44562f403

Score
10/10

Malware Config

Targets

    • Target

      รูปภาพที่ต้องลบ.exe

    • Size

      24.4MB

    • MD5

      60e8c8216af0a6c159364a3cfebc1f1b

    • SHA1

      ffd81aa28975dfd4f8e09aa55863c569f6c37037

    • SHA256

      12d14cc1f1d29e131b94659bd8830ce0afe855973f36648929f6bdc7dab4b87f

    • SHA512

      8852553899c83a5d922ca78048b8a37f0a014501796044f1c826b68599365cde0f9046351bffe1f09d07707b2f5049c12dd0dc5a949da076160d7ef44562f403

    Score
    10/10

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Program crash

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks