Overview

overview

8

Static

static

5432da045e...6b.exe

windows7-x64

8

5432da045e...6b.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5432da045e41ec160ab6eb81fb23d3835f6da9393f5cbfedf9da67d17b883b6b

  • Size

    298KB

  • Sample

    220919-st31taega4

  • MD5

    bae857d595c43964c0ca2fb3343e0e03

  • SHA1

    c72272e0eca993702900a8a56d3d392c00dd6c5e

  • SHA256

    5432da045e41ec160ab6eb81fb23d3835f6da9393f5cbfedf9da67d17b883b6b

  • SHA512

    f4569ecf284e5e9b0a6e6a06ee06de20fcd2adefd0bfb4da3c46baf49bf4ba98f5ac3e33c3a8abb80428ee47fdfbc0ebb8796d63d5292c5a5ec988ad9022a8d7

  • SSDEEP

    3072:9ape7FPXvomWqLEnCYvcvIXRTy1hmUI0xlOcw1IvS3oGcFuG9hFoHk148GzMwcp7:W0XAvDx8hzNxl81IvSiFxTO8GzMf

Score
8/10
persistence

Malware Config

Targets

    • Target

      5432da045e41ec160ab6eb81fb23d3835f6da9393f5cbfedf9da67d17b883b6b

    • Size

      298KB

    • MD5

      bae857d595c43964c0ca2fb3343e0e03

    • SHA1

      c72272e0eca993702900a8a56d3d392c00dd6c5e

    • SHA256

      5432da045e41ec160ab6eb81fb23d3835f6da9393f5cbfedf9da67d17b883b6b

    • SHA512

      f4569ecf284e5e9b0a6e6a06ee06de20fcd2adefd0bfb4da3c46baf49bf4ba98f5ac3e33c3a8abb80428ee47fdfbc0ebb8796d63d5292c5a5ec988ad9022a8d7

    • SSDEEP

      3072:9ape7FPXvomWqLEnCYvcvIXRTy1hmUI0xlOcw1IvS3oGcFuG9hFoHk148GzMwcp7:W0XAvDx8hzNxl81IvSiFxTO8GzMf

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks