Overview

overview

8

Static

static

Doc-Preview.exe

windows7_x64

8

Doc-Preview.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Doc-Preview.exe

  • Size

    425KB

  • Sample

    200715-yf4pxpf8w2

  • MD5

    f5b7ebf0221bd55dbda661eefde1d958

  • SHA1

    ebbd293fb26da47cdfbc47b55371de2772faa5ac

  • SHA256

    66fe4f89b6a5408851c16d7af393e97969e8712d5e7300a75e54c86ad33d1060

  • SHA512

    3c94d1f492fde84a3ae142349916c874db5b2b53b7755b9de74122ca5aba2801ca0e7185a2df433090c86039354ab2cf31a394337d086705b1a280a97ccda2c7

Score
8/10

Malware Config

Targets

    • Target

      Doc-Preview.exe

    • Size

      425KB

    • MD5

      f5b7ebf0221bd55dbda661eefde1d958

    • SHA1

      ebbd293fb26da47cdfbc47b55371de2772faa5ac

    • SHA256

      66fe4f89b6a5408851c16d7af393e97969e8712d5e7300a75e54c86ad33d1060

    • SHA512

      3c94d1f492fde84a3ae142349916c874db5b2b53b7755b9de74122ca5aba2801ca0e7185a2df433090c86039354ab2cf31a394337d086705b1a280a97ccda2c7

    Score
    8/10

    • Blacklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks