Overview

overview

8

Static

static

00d9d0d431...81.exe

windows7-x64

8

00d9d0d431...81.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00d9d0d4316954933bbca30c96dbb983c5a2671c5ce64f76f16e0a963c6e1781

  • Size

    537KB

  • Sample

    221002-rrae2saee5

  • MD5

    678624d681138314f82827cadbf309c2

  • SHA1

    6a287d5119fd09792df4d77f162fa4d1c47b1144

  • SHA256

    00d9d0d4316954933bbca30c96dbb983c5a2671c5ce64f76f16e0a963c6e1781

  • SHA512

    7171cdff97b59a8369cd3eab96e6a5a25cdad8bcc0d8c6973e6350f9c2d8304ad7bdc8427e17d64552c46608749378e677d1c2e1601479640c13cdfa456c125b

  • SSDEEP

    12288:byIwlgn+C5IxJ845HYV5sxOH/ccccccceBS:bYleav84a5sxKS

Score
8/10
persistence

Malware Config

Targets

    • Target

      00d9d0d4316954933bbca30c96dbb983c5a2671c5ce64f76f16e0a963c6e1781

    • Size

      537KB

    • MD5

      678624d681138314f82827cadbf309c2

    • SHA1

      6a287d5119fd09792df4d77f162fa4d1c47b1144

    • SHA256

      00d9d0d4316954933bbca30c96dbb983c5a2671c5ce64f76f16e0a963c6e1781

    • SHA512

      7171cdff97b59a8369cd3eab96e6a5a25cdad8bcc0d8c6973e6350f9c2d8304ad7bdc8427e17d64552c46608749378e677d1c2e1601479640c13cdfa456c125b

    • SSDEEP

      12288:byIwlgn+C5IxJ845HYV5sxOH/ccccccceBS:bYleav84a5sxKS

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks