Overview

overview

10

Static

static

10

bce77d91ff...21.dll

windows7_x64

1

bce77d91ff...21.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bce77d91ff59b5bfe613365aa5ede0060f14b7a5109913925dfff79ee18b5721

  • Size

    136KB

  • Sample

    220201-l1e41adba6

  • MD5

    2aa1884341376797f23e02e7f1e78a8b

  • SHA1

    154b6eaa03b622f0ddd3b6899f484b0c9cd3551a

  • SHA256

    bce77d91ff59b5bfe613365aa5ede0060f14b7a5109913925dfff79ee18b5721

  • SHA512

    7a258a9fce8213f7bd952c893c81263a006e39ed19e821fe286c31c58e9d3bcbb2df166bdc6e41ccefe4cff1ab045e0fe2bd4e96e1bcaee24c0f9587be52b85f

Score
10/10
anchordnsbackdoorpersistence

Malware Config

Targets

    • Target

      bce77d91ff59b5bfe613365aa5ede0060f14b7a5109913925dfff79ee18b5721

    • Size

      136KB

    • MD5

      2aa1884341376797f23e02e7f1e78a8b

    • SHA1

      154b6eaa03b622f0ddd3b6899f484b0c9cd3551a

    • SHA256

      bce77d91ff59b5bfe613365aa5ede0060f14b7a5109913925dfff79ee18b5721

    • SHA512

      7a258a9fce8213f7bd952c893c81263a006e39ed19e821fe286c31c58e9d3bcbb2df166bdc6e41ccefe4cff1ab045e0fe2bd4e96e1bcaee24c0f9587be52b85f

    Score
    10/10
    persistence

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks