Overview

overview

10

Static

static

ff7591112f...97.exe

windows7-x64

10

ff7591112f...97.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff7591112f2b8c1f6f283a5009432ef7ed68663d61689ede348edc407095f097

  • Size

    114KB

  • Sample

    221002-nte7jaehem

  • MD5

    75aa766100cc00a023da88329c7792d9

  • SHA1

    6b09bf4ad151316312e3ea1ca6496da85bf2db35

  • SHA256

    ff7591112f2b8c1f6f283a5009432ef7ed68663d61689ede348edc407095f097

  • SHA512

    de570df22cc6356bc7e47dc14ff3f44046df6c68cc0f333227332bae63d875539d6af11021432c383de6e45470190bf0a96e22d9f48bdacdf6f789243a3f2957

  • SSDEEP

    1536:nIe/0V+dTagDoFdcokBmzJEjr10OJl+kJLcNg38r0G3EtLKJZsn867QJlSEEwNVv:Ie/0VQagDojEBn1KktY3EFKkcJAxY

Score
10/10
evasion

Malware Config

Targets

    • Target

      ff7591112f2b8c1f6f283a5009432ef7ed68663d61689ede348edc407095f097

    • Size

      114KB

    • MD5

      75aa766100cc00a023da88329c7792d9

    • SHA1

      6b09bf4ad151316312e3ea1ca6496da85bf2db35

    • SHA256

      ff7591112f2b8c1f6f283a5009432ef7ed68663d61689ede348edc407095f097

    • SHA512

      de570df22cc6356bc7e47dc14ff3f44046df6c68cc0f333227332bae63d875539d6af11021432c383de6e45470190bf0a96e22d9f48bdacdf6f789243a3f2957

    • SSDEEP

      1536:nIe/0V+dTagDoFdcokBmzJEjr10OJl+kJLcNg38r0G3EtLKJZsn867QJlSEEwNVv:Ie/0VQagDojEBn1KktY3EFKkcJAxY

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks