Overview

overview

8

Static

static

f620c12580...36.exe

windows7-x64

8

f620c12580...36.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f620c12580e2a98b43dea03aaa0a099a7bb1cd236dc934805a63051b47904036

  • Size

    145KB

  • Sample

    221003-j74ptsege6

  • MD5

    6e33de0e66f86ad3cb14ae10583a9bb6

  • SHA1

    11d3b39fdb3cd8351f2cf6da02314bb5527de666

  • SHA256

    f620c12580e2a98b43dea03aaa0a099a7bb1cd236dc934805a63051b47904036

  • SHA512

    1607e399086d4d65bf0efb5db9cad52ac18199259df8cb0f323ddf97ecb7a7d181fea2354248ef4430014ad685ca866b7e9a7a5333305555b03e31f7a978bec0

  • SSDEEP

    3072:4+P2674qzVSnst36u6ZWoPbY84LeQR/K9HBsHf916EEPz0BfR:fbkqzVgLhQINBsHfD6EEP

Score
8/10
persistence

Malware Config

Targets

    • Target

      f620c12580e2a98b43dea03aaa0a099a7bb1cd236dc934805a63051b47904036

    • Size

      145KB

    • MD5

      6e33de0e66f86ad3cb14ae10583a9bb6

    • SHA1

      11d3b39fdb3cd8351f2cf6da02314bb5527de666

    • SHA256

      f620c12580e2a98b43dea03aaa0a099a7bb1cd236dc934805a63051b47904036

    • SHA512

      1607e399086d4d65bf0efb5db9cad52ac18199259df8cb0f323ddf97ecb7a7d181fea2354248ef4430014ad685ca866b7e9a7a5333305555b03e31f7a978bec0

    • SSDEEP

      3072:4+P2674qzVSnst36u6ZWoPbY84LeQR/K9HBsHf916EEPz0BfR:fbkqzVgLhQINBsHfD6EEP

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks