Overview

overview

8

Static

static

40c47bf171...7f.exe

windows7_x64

8

40c47bf171...7f.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40c47bf171107772b25ebc2e4c93e07f.exe

  • Size

    256KB

  • Sample

    200710-y1md3sm1p2

  • MD5

    40c47bf171107772b25ebc2e4c93e07f

  • SHA1

    3f359cee9149efd1c1f6c3af9b7a8fde00127649

  • SHA256

    0d940f08d64efc4b094727e8d8254542d6c1e87917628e1d48ea0bed86aa3247

  • SHA512

    946e6fb3bfb7e9b427d820a7a96f1e3bbbb23ccacc7e01c233d9feb8b5f690b00c55a701dab9c5a82e0e8bb346578b3eb9652d854eb8566856392ac44c3bf59e

Score
8/10

Malware Config

Targets

    • Target

      40c47bf171107772b25ebc2e4c93e07f.exe

    • Size

      256KB

    • MD5

      40c47bf171107772b25ebc2e4c93e07f

    • SHA1

      3f359cee9149efd1c1f6c3af9b7a8fde00127649

    • SHA256

      0d940f08d64efc4b094727e8d8254542d6c1e87917628e1d48ea0bed86aa3247

    • SHA512

      946e6fb3bfb7e9b427d820a7a96f1e3bbbb23ccacc7e01c233d9feb8b5f690b00c55a701dab9c5a82e0e8bb346578b3eb9652d854eb8566856392ac44c3bf59e

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks