66fe4f89b6a5408851c16d7af393e97969e8712d5e7300a75e54c86ad33d1060 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Doc-Preview.exe
Size 425KB
Sample200715-fdgp2qh6sj
SHA256 66fe4f89b6a5408851c16d7af393e97969e8712d5e7300a75e54c86ad33d1060
MD5 f5b7ebf0221bd55dbda661eefde1d958
SHA1 ebbd293fb26da47cdfbc47b55371de2772faa5ac
SHA512 3c94d1f492fde84a3ae142349916c874db5b2b53b7755b9de74122ca5aba2801ca0e7185a2df433090c86039354ab2cf31a394337d086705b1a280a97ccda2c7
MD5 SHA1 SHA512

Score

8^/10

Malware Config

Targets

- Target
  Doc-Preview.exe
- Size 425KB
- SHA256 66fe4f89b6a5408851c16d7af393e97969e8712d5e7300a75e54c86ad33d1060
- MD5 f5b7ebf0221bd55dbda661eefde1d958
- SHA1 ebbd293fb26da47cdfbc47b55371de2772faa5ac
- SHA512 3c94d1f492fde84a3ae142349916c874db5b2b53b7755b9de74122ca5aba2801ca0e7185a2df433090c86039354ab2cf31a394337d086705b1a280a97ccda2c7
- MD5 SHA1 SHA512
Score

8^/10
- Blacklisted process makes network request
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Matrix

Tasks

static1

behavioral1