Overview

overview

8

Static

static

d00d56be50...05.exe

windows7-x64

8

d00d56be50...05.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d00d56be50b6a0fc210308753a913eb272e2160dfbb5d5574ada4b37b9f7f505

  • Size

    164KB

  • Sample

    220919-w7ef6agdej

  • MD5

    5b6b2e56ec216497c336875c522f31b7

  • SHA1

    f2fbfc72bebcf93b14d5eb4f9612e5805529395d

  • SHA256

    d00d56be50b6a0fc210308753a913eb272e2160dfbb5d5574ada4b37b9f7f505

  • SHA512

    e6924706bfbe78ec224ddec063e4e6ed09d9bcca7356fb45948ddbd44172ac96da43bc7af42386cc15d78625cd4ddd21df2bdb2d5b66313e40cc53d2f752b9e7

  • SSDEEP

    3072:tXKDm5xmnAcNvjOl7QaoyUl1B1adztxGUJhq1k+qg7cdu11FQA9ApyKx7:taCanvOE087adz7ornEG1qmk

Score
8/10
persistence

Malware Config

Targets

    • Target

      d00d56be50b6a0fc210308753a913eb272e2160dfbb5d5574ada4b37b9f7f505

    • Size

      164KB

    • MD5

      5b6b2e56ec216497c336875c522f31b7

    • SHA1

      f2fbfc72bebcf93b14d5eb4f9612e5805529395d

    • SHA256

      d00d56be50b6a0fc210308753a913eb272e2160dfbb5d5574ada4b37b9f7f505

    • SHA512

      e6924706bfbe78ec224ddec063e4e6ed09d9bcca7356fb45948ddbd44172ac96da43bc7af42386cc15d78625cd4ddd21df2bdb2d5b66313e40cc53d2f752b9e7

    • SSDEEP

      3072:tXKDm5xmnAcNvjOl7QaoyUl1B1adztxGUJhq1k+qg7cdu11FQA9ApyKx7:taCanvOE087adz7ornEG1qmk

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks