Overview

overview

8

Static

static

9ba15b1ef7...6c.exe

windows7-x64

8

9ba15b1ef7...6c.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ba15b1ef7904a5a42d7e87ad34c44be03f861a7b8a08b6004e73e5a5d21a06c

  • Size

    654KB

  • Sample

    221003-je527addh2

  • MD5

    6a5a5a8edbbfd9935fe267fa68d8dc50

  • SHA1

    81b5fd7ede7bd3fe0144ec1c857cc13e480904d2

  • SHA256

    9ba15b1ef7904a5a42d7e87ad34c44be03f861a7b8a08b6004e73e5a5d21a06c

  • SHA512

    b909c5c4745a1ed19efb9a4b19247c2df8a1ad2c3bfedd4ba400060fed74f0a65260778694a802bdb803c6a06943feea4823d4b2c2b03a0190d23a4c8d011240

  • SSDEEP

    12288:B+m9zsNwJY8a2Pg9MknRqIxpa2Pg9MknRqIxM:BR9zyQ2wYMknRqIOwYMknRqI2

Score
8/10
persistence

Malware Config

Targets

    • Target

      9ba15b1ef7904a5a42d7e87ad34c44be03f861a7b8a08b6004e73e5a5d21a06c

    • Size

      654KB

    • MD5

      6a5a5a8edbbfd9935fe267fa68d8dc50

    • SHA1

      81b5fd7ede7bd3fe0144ec1c857cc13e480904d2

    • SHA256

      9ba15b1ef7904a5a42d7e87ad34c44be03f861a7b8a08b6004e73e5a5d21a06c

    • SHA512

      b909c5c4745a1ed19efb9a4b19247c2df8a1ad2c3bfedd4ba400060fed74f0a65260778694a802bdb803c6a06943feea4823d4b2c2b03a0190d23a4c8d011240

    • SSDEEP

      12288:B+m9zsNwJY8a2Pg9MknRqIxpa2Pg9MknRqIxM:BR9zyQ2wYMknRqIOwYMknRqI2

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks