Overview

overview

10

Static

static

10

997f098e1c...8f.exe

windows7_x64

1

997f098e1c...8f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    997f098e1c4a49555f9b8a5497b06fc0622e0c2aaf2f08d4cbd92d527d0a6b8f

  • Size

    4.3MB

  • Sample

    220131-3wjp3adfhr

  • MD5

    5ede6cd41d4b5338d18d3463b303079c

  • SHA1

    eef92406e53381298dc2fdf0a8420b126b94ec9d

  • SHA256

    997f098e1c4a49555f9b8a5497b06fc0622e0c2aaf2f08d4cbd92d527d0a6b8f

  • SHA512

    3069522708ab9d35e16b0098dd63d15f36a31091ab94f4f69529ef9b5e76033603cef57c41afb69903d3af5a686eaff71fe40ff9789ca943c2ec0752ab702825

Score
10/10
snatchpersistence

Malware Config

Targets

    • Target

      997f098e1c4a49555f9b8a5497b06fc0622e0c2aaf2f08d4cbd92d527d0a6b8f

    • Size

      4.3MB

    • MD5

      5ede6cd41d4b5338d18d3463b303079c

    • SHA1

      eef92406e53381298dc2fdf0a8420b126b94ec9d

    • SHA256

      997f098e1c4a49555f9b8a5497b06fc0622e0c2aaf2f08d4cbd92d527d0a6b8f

    • SHA512

      3069522708ab9d35e16b0098dd63d15f36a31091ab94f4f69529ef9b5e76033603cef57c41afb69903d3af5a686eaff71fe40ff9789ca943c2ec0752ab702825

    Score
    10/10
    persistence

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks