Overview

overview

8

Static

static

826e6780c1...e6.exe

windows7-x64

8

826e6780c1...e6.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    826e6780c15256ddb77ccc91ae29f0b51a44b6a91bc7bebe293783a525b174e6

  • Size

    32KB

  • Sample

    221003-hr84yaccg2

  • MD5

    4e5bc9f5cb80d59b6870fa0b8256a009

  • SHA1

    9d6a406e3320b6bcea6709a5d40ff79b5d58c136

  • SHA256

    826e6780c15256ddb77ccc91ae29f0b51a44b6a91bc7bebe293783a525b174e6

  • SHA512

    65973c918b137cfb55a753eb6a2ae86bf7a533f5de7d9945521753591697e5b95d8343ae67623a6fb8f0532c6c0f28b319283169bf22a1abee854faee601fe45

  • SSDEEP

    768:fLtSicMYSN1ssmOuYvnkhbW+N1c+OeFpGgh8N9:fLoicM1N1W2khb5OOjO/

Score
8/10

Malware Config

Targets

    • Target

      826e6780c15256ddb77ccc91ae29f0b51a44b6a91bc7bebe293783a525b174e6

    • Size

      32KB

    • MD5

      4e5bc9f5cb80d59b6870fa0b8256a009

    • SHA1

      9d6a406e3320b6bcea6709a5d40ff79b5d58c136

    • SHA256

      826e6780c15256ddb77ccc91ae29f0b51a44b6a91bc7bebe293783a525b174e6

    • SHA512

      65973c918b137cfb55a753eb6a2ae86bf7a533f5de7d9945521753591697e5b95d8343ae67623a6fb8f0532c6c0f28b319283169bf22a1abee854faee601fe45

    • SSDEEP

      768:fLtSicMYSN1ssmOuYvnkhbW+N1c+OeFpGgh8N9:fLoicM1N1W2khb5OOjO/

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks