Overview

overview

9

Static

static

3a3c9386c1...31.exe

windows7_x64

9

3a3c9386c1...31.exe

windows10_x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5666788058759168.zip

  • Size

    1.3MB

  • Sample

    210810-cw71js2kcn

  • MD5

    2e07907a2111c19ecad9c8ffcb5b0091

  • SHA1

    57e8786f7e82373ed2267c61bccb60d66abf8696

  • SHA256

    cf08f90760f65ec476a9114d8d5d6bb16a3cce611939f62bb25b4cb22ec009a3

  • SHA512

    030dd3c041e98960cec415b846b41868f5010620c359ccc39e988836e87e81ab41a4d33e81b8551375d3715dff4192649de06c22b4daa9653a040c5ac1d0d705

Score
9/10

Malware Config

Targets

    • Target

      3a3c9386c12ded47cc0ee24c6f915de9ca5744e68573638aa4c533704bcfee31

    • Size

      1.8MB

    • MD5

      fb0421f4ec21ea6c6b67f8bc89b6ecc6

    • SHA1

      611917bf370e715c3092c697997a549f009eaa7d

    • SHA256

      3a3c9386c12ded47cc0ee24c6f915de9ca5744e68573638aa4c533704bcfee31

    • SHA512

      9111bca9a76420324e53445f9ad1a2ac6eb0ea65f2df570dc93a2e2c253b6cf4298f35d4d5aedf46b6655adada5e3a17070d988ae057ab41dc139720cbd617ab

    Score
    9/10

    • CustAttr .NET packer

      Detects CustAttr .NET packer in memory.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks