Overview

overview

8

Static

static

439ec4d318...ef.exe

windows7-x64

8

439ec4d318...ef.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    439ec4d318bea608cf288ab9f3f7a76d54db9dceb5b948108255ffaf8dd979ef

  • Size

    52KB

  • Sample

    221001-ywf7qaegfq

  • MD5

    6272287e2bfd810bfdb4d55775f49f00

  • SHA1

    b68e24c5b180d9c55db4f0ef9ceb732672feeeae

  • SHA256

    439ec4d318bea608cf288ab9f3f7a76d54db9dceb5b948108255ffaf8dd979ef

  • SHA512

    a612373785ebdb78d75d0e3045a5c85dee38b47d9f42f9077bfe11a08dff9dd0e545fd818854160d1c9f474857109350a28ef4028d20b8e9af11996477f19753

  • SSDEEP

    768:DtBJNVWPmOtk67tWNoxHRNrgTizn0KpP9hHo5Y8b6SKkDKtvPprKTrFHKyqTKoT:vknW67cNoxHRNpvp1OY6cWKtaFqyO

Score
8/10
persistence

Malware Config

Targets

    • Target

      439ec4d318bea608cf288ab9f3f7a76d54db9dceb5b948108255ffaf8dd979ef

    • Size

      52KB

    • MD5

      6272287e2bfd810bfdb4d55775f49f00

    • SHA1

      b68e24c5b180d9c55db4f0ef9ceb732672feeeae

    • SHA256

      439ec4d318bea608cf288ab9f3f7a76d54db9dceb5b948108255ffaf8dd979ef

    • SHA512

      a612373785ebdb78d75d0e3045a5c85dee38b47d9f42f9077bfe11a08dff9dd0e545fd818854160d1c9f474857109350a28ef4028d20b8e9af11996477f19753

    • SSDEEP

      768:DtBJNVWPmOtk67tWNoxHRNrgTizn0KpP9hHo5Y8b6SKkDKtvPprKTrFHKyqTKoT:vknW67cNoxHRNpvp1OY6cWKtaFqyO

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks