Overview

overview

10

Static

static

10

ff2b9b6121...d8.dll

windows7_x64

1

ff2b9b6121...d8.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ff2b9b6121b3812a344144bfa4082c8b7567af1e75e352fde64eee6d060b18d8
  • Size 6KB
  • Sample220201-pwffrafah4
  • SHA256 ff2b9b6121b3812a344144bfa4082c8b7567af1e75e352fde64eee6d060b18d8
  • MD5 SHA1 SHA512
Score
10/10
nloaderpersistence

Malware Config

Targets

    • Target
      ff2b9b6121b3812a344144bfa4082c8b7567af1e75e352fde64eee6d060b18d8
    • Size 6KB
    • SHA256 ff2b9b6121b3812a344144bfa4082c8b7567af1e75e352fde64eee6d060b18d8
    • MD5 SHA1 SHA512
    Score
    10/10
    persistence

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks