Overview

overview

8

Static

static

a91cbff6ee...62.exe

windows7-x64

8

a91cbff6ee...62.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a91cbff6ee3acf39c66c71b8f5bd58cf4b1d11de101d4c29b518da40698c1a62

  • Size

    252KB

  • Sample

    221004-bx49lsffdk

  • MD5

    4dce74972c9f004b19065d1516589a60

  • SHA1

    e077276ffc2ad0821a98554401179fce9298af6f

  • SHA256

    a91cbff6ee3acf39c66c71b8f5bd58cf4b1d11de101d4c29b518da40698c1a62

  • SHA512

    1c204314a0a65f7199c70248fea3b23676bb144c0011cc5f73922e5dbf2a9721204df387de19820e02c2bb3dca0a94268322cbcba0ffb28be77f1def8088a862

  • SSDEEP

    6144:A2XvWgJZsNaLOli2nfeYfBI/SNGq/xs/TSYOmuqLDSQN8:A2XOUagilzfeY4Zq/xs/TSYDuqLDSQN8

Score
8/10
persistence

Malware Config

Targets

    • Target

      a91cbff6ee3acf39c66c71b8f5bd58cf4b1d11de101d4c29b518da40698c1a62

    • Size

      252KB

    • MD5

      4dce74972c9f004b19065d1516589a60

    • SHA1

      e077276ffc2ad0821a98554401179fce9298af6f

    • SHA256

      a91cbff6ee3acf39c66c71b8f5bd58cf4b1d11de101d4c29b518da40698c1a62

    • SHA512

      1c204314a0a65f7199c70248fea3b23676bb144c0011cc5f73922e5dbf2a9721204df387de19820e02c2bb3dca0a94268322cbcba0ffb28be77f1def8088a862

    • SSDEEP

      6144:A2XvWgJZsNaLOli2nfeYfBI/SNGq/xs/TSYOmuqLDSQN8:A2XOUagilzfeY4Zq/xs/TSYDuqLDSQN8

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks