Overview

overview

9

Static

static

d5d6204c26...01.exe

windows7-x64

9

d5d6204c26...01.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5d6204c26df30f65ab91b1cc5fc958e9ecd461f64af1d938e8d0aff0d690201

  • Size

    210KB

  • Sample

    221004-fqegtsdce2

  • MD5

    17a49e2fd137cdb395e1b1bf29a991c0

  • SHA1

    40abc407f453e01a15b7b87a528713ec5c22419c

  • SHA256

    d5d6204c26df30f65ab91b1cc5fc958e9ecd461f64af1d938e8d0aff0d690201

  • SHA512

    a8a8ab814884f2e8c7ecaa19866805b4c9add1e3139de8fc97bd6e9b496d4161c36592e168f0e1551a49eaafb36d07a4606149bac863e8e0b467565c571e5b91

  • SSDEEP

    6144:/jS6OyHDswmVARqnt6KNHR+aT+apQ8mQWKpf:/jSyshAgbL+VwQuTf

Score
9/10

Malware Config

Targets

    • Target

      d5d6204c26df30f65ab91b1cc5fc958e9ecd461f64af1d938e8d0aff0d690201

    • Size

      210KB

    • MD5

      17a49e2fd137cdb395e1b1bf29a991c0

    • SHA1

      40abc407f453e01a15b7b87a528713ec5c22419c

    • SHA256

      d5d6204c26df30f65ab91b1cc5fc958e9ecd461f64af1d938e8d0aff0d690201

    • SHA512

      a8a8ab814884f2e8c7ecaa19866805b4c9add1e3139de8fc97bd6e9b496d4161c36592e168f0e1551a49eaafb36d07a4606149bac863e8e0b467565c571e5b91

    • SSDEEP

      6144:/jS6OyHDswmVARqnt6KNHR+aT+apQ8mQWKpf:/jSyshAgbL+VwQuTf

    Score
    9/10

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks