Overview

overview

8

Static

static

PO# 459ARG1672020.scr

windows7_x64

8

PO# 459ARG1672020.scr

windows10_x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    PO# 459ARG1672020.scr
  • Size 709KB
  • Sample200716-9hxmldxsr6
  • SHA256 6da9729b89ad6b0aff3f94e20754a9d46185fe0c9076aa950ddf8e4e720e5ef0
  • MD5 SHA1 SHA512
Score
8/10
persistence

Malware Config

Targets

    • Target
      PO# 459ARG1672020.scr
    • Size 709KB
    • SHA256 6da9729b89ad6b0aff3f94e20754a9d46185fe0c9076aa950ddf8e4e720e5ef0
    • MD5 SHA1 SHA512
    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks