Overview

overview

8

Static

static

26a070357b...85.exe

windows7-x64

8

26a070357b...85.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26a070357b84d7ffe926a233ea3f3233a10e52f6256345915c7d2da8c0daa985

  • Size

    355KB

  • Sample

    220919-x4czlahfbq

  • MD5

    495ca21a26b6b070450c614ae12b2d1b

  • SHA1

    de89e4cb57c19109d7b7a89623fc3ccc3ea31257

  • SHA256

    26a070357b84d7ffe926a233ea3f3233a10e52f6256345915c7d2da8c0daa985

  • SHA512

    728ef34597a42e9f2c191fa46253ba40c97c9561693aded01733c73587d8d980822583a8cfa52d7bc24f4e1d413ee844ac432306b7dfdef38f5288a4dbd075ed

  • SSDEEP

    6144:QcpFrN4p9/5mOeBBBhMwgQj1SHp89fL+3ApBVSs+jukWU1:fn2vg/NhM9p89fL+wpBVEV1

Score
8/10
persistence

Malware Config

Targets

    • Target

      26a070357b84d7ffe926a233ea3f3233a10e52f6256345915c7d2da8c0daa985

    • Size

      355KB

    • MD5

      495ca21a26b6b070450c614ae12b2d1b

    • SHA1

      de89e4cb57c19109d7b7a89623fc3ccc3ea31257

    • SHA256

      26a070357b84d7ffe926a233ea3f3233a10e52f6256345915c7d2da8c0daa985

    • SHA512

      728ef34597a42e9f2c191fa46253ba40c97c9561693aded01733c73587d8d980822583a8cfa52d7bc24f4e1d413ee844ac432306b7dfdef38f5288a4dbd075ed

    • SSDEEP

      6144:QcpFrN4p9/5mOeBBBhMwgQj1SHp89fL+3ApBVSs+jukWU1:fn2vg/NhM9p89fL+wpBVEV1

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks