Overview

overview

8

Static

static

f822992f67...27.exe

windows7-x64

8

f822992f67...27.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    f822992f670e7a0c78a6db7944a2b5771daad36a523734b0650fd29294628627

  • Size

    288KB

  • Sample

    221002-nw17safagr

  • MD5

    70375ed0d8700e60ed1085dfee2cb0a0

  • SHA1

    e020747f98be0d6e3b98134c6ef1a3cf9a7162a6

  • SHA256

    f822992f670e7a0c78a6db7944a2b5771daad36a523734b0650fd29294628627

  • SHA512

    77cc43d8b713da7602d11f53a8205c5667ed80f56b4d9d5fd6f7f184edb2755ad2302d9fa8c5b1db99630340b3aacfdb262a4746bac7db1004d364742b0bf350

  • SSDEEP

    6144:3KqKTxQOoHqhoisuARka3uSWA2OhzH3/vbhinESmP0cUKt7iMMb21eGnL:3tWXoHqSi6RBuSWTOxX/DqEhP3t

Score
8/10
persistence

Malware Config

Targets

    • Target

      f822992f670e7a0c78a6db7944a2b5771daad36a523734b0650fd29294628627

    • Size

      288KB

    • MD5

      70375ed0d8700e60ed1085dfee2cb0a0

    • SHA1

      e020747f98be0d6e3b98134c6ef1a3cf9a7162a6

    • SHA256

      f822992f670e7a0c78a6db7944a2b5771daad36a523734b0650fd29294628627

    • SHA512

      77cc43d8b713da7602d11f53a8205c5667ed80f56b4d9d5fd6f7f184edb2755ad2302d9fa8c5b1db99630340b3aacfdb262a4746bac7db1004d364742b0bf350

    • SSDEEP

      6144:3KqKTxQOoHqhoisuARka3uSWA2OhzH3/vbhinESmP0cUKt7iMMb21eGnL:3tWXoHqSi6RBuSWTOxX/DqEhP3t

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks