Overview

overview

10

Static

static

10

1375e3516d...fc.exe

windows7_x64

3

1375e3516d...fc.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1375e3516d8202ca292152945dff3b8333e5edd705288c682910fd033a0ceefc

  • Size

    100KB

  • Sample

    220212-ft619ahhfr

  • MD5

    4bcd89160708645b32c5d0a6074c2804

  • SHA1

    d6f00f88d5ea4ffd4731e827bf2203cd22d6ac61

  • SHA256

    1375e3516d8202ca292152945dff3b8333e5edd705288c682910fd033a0ceefc

  • SHA512

    bdcf9a767602366c3b9f1cfd01d196c89ccd89eae3bf511ab4844e85dc894f7b5649dc2c3304855490178f9ec7364874bd9c98e420b10e9d20378086649e0668

Score
10/10
sakula

Malware Config

Targets

    • Target

      1375e3516d8202ca292152945dff3b8333e5edd705288c682910fd033a0ceefc

    • Size

      100KB

    • MD5

      4bcd89160708645b32c5d0a6074c2804

    • SHA1

      d6f00f88d5ea4ffd4731e827bf2203cd22d6ac61

    • SHA256

      1375e3516d8202ca292152945dff3b8333e5edd705288c682910fd033a0ceefc

    • SHA512

      bdcf9a767602366c3b9f1cfd01d196c89ccd89eae3bf511ab4844e85dc894f7b5649dc2c3304855490178f9ec7364874bd9c98e420b10e9d20378086649e0668

    Score
    10/10

    • Suspicious use of NtCreateProcessExOtherParentProcess

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks