Overview

overview

8

Static

static

fola(1).exe

windows7_x64

8

fola(1).exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    fola(1).exe
  • Size 4.7MB
  • Sample201201-sszdbb66s6
  • SHA256 b7823b23e2ef21045e77a01f2f34f86f387a607f4c1d949571c01c1fcdfd7fa1
  • MD5 SHA1 SHA512
Score
8/10

Malware Config

Targets

    • Target
      fola(1).exe
    • Size 4.7MB
    • SHA256 b7823b23e2ef21045e77a01f2f34f86f387a607f4c1d949571c01c1fcdfd7fa1
    • MD5 SHA1 SHA512
    Score
    8/10

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks