Overview

overview

8

Static

static

6aa97acca8...cd.exe

windows7_x64

8

6aa97acca8...cd.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    6aa97acca8545664077d24df70b2c5cd
  • Size 2.7MB
  • Sample210624-5wp399cyss
  • SHA256 c47a4294b97b5b05ac78f01950d4cf964faf03adf9f0b495c157d09c6f3cf564
  • MD5 SHA1 SHA512
Score
8/10
agilenet

Malware Config

Targets

    • Target
      6aa97acca8545664077d24df70b2c5cd
    • Size 2.7MB
    • SHA256 c47a4294b97b5b05ac78f01950d4cf964faf03adf9f0b495c157d09c6f3cf564
    • MD5 SHA1 SHA512
    Score
    8/10
    agilenet

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Suspicious use of SetThreadContext

    • autoit_exe

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks