Overview

overview

10

Static

static

10

e90633e63f...c5.exe

windows7_x64

1

e90633e63f...c5.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e90633e63fb5fdd6ba36d129b5b6cbaa94ad958dfde383893f21a960cac60bc5

  • Size

    4.3MB

  • Sample

    220131-2dv5pschbn

  • MD5

    d9a272d512e8e3d7a7e399084d721888

  • SHA1

    69b33af91bc43d37d394481bb6e943c2a65aafa2

  • SHA256

    e90633e63fb5fdd6ba36d129b5b6cbaa94ad958dfde383893f21a960cac60bc5

  • SHA512

    45978e58b6937b3ff1ef987b7f4dfc72ed99e3f50daddd754c256a5e28b59f4731c2e62f8309b195037769f4b120ba488e03e3a9da2094ba543dbb33619d9cb6

Score
10/10
snatchpersistence

Malware Config

Targets

    • Target

      e90633e63fb5fdd6ba36d129b5b6cbaa94ad958dfde383893f21a960cac60bc5

    • Size

      4.3MB

    • MD5

      d9a272d512e8e3d7a7e399084d721888

    • SHA1

      69b33af91bc43d37d394481bb6e943c2a65aafa2

    • SHA256

      e90633e63fb5fdd6ba36d129b5b6cbaa94ad958dfde383893f21a960cac60bc5

    • SHA512

      45978e58b6937b3ff1ef987b7f4dfc72ed99e3f50daddd754c256a5e28b59f4731c2e62f8309b195037769f4b120ba488e03e3a9da2094ba543dbb33619d9cb6

    Score
    10/10
    persistence

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks