Overview

overview

8

Static

static

7e0635764b...64.exe

windows7-x64

8

7e0635764b...64.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164

  • Size

    301KB

  • Sample

    221011-h8hy3scbep

  • MD5

    61bb8b121f44b62f5a4e863ff6ceb0f0

  • SHA1

    ef227419dc821485a22836576d4e0fae62d6490c

  • SHA256

    7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164

  • SHA512

    38bcf7e9f99221c49ac52351cab471b495eeb9f6e656b8a927e8c49de2636282e6dcadaab75bf49a354439a98a117d438d6a0f0073dcb05dd23ea1da31824103

  • SSDEEP

    6144:g78nTpnyRPYZWG5U5X5WqoAY7O3Q9KL8W7p7bo:28nkQEG254qFgOgoLxp7bo

Score
8/10
persistence

Malware Config

Targets

    • Target

      7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164

    • Size

      301KB

    • MD5

      61bb8b121f44b62f5a4e863ff6ceb0f0

    • SHA1

      ef227419dc821485a22836576d4e0fae62d6490c

    • SHA256

      7e0635764b5780aedcb4126c661e4859f61a0e2a64c9dc5d8db00c94fa02f164

    • SHA512

      38bcf7e9f99221c49ac52351cab471b495eeb9f6e656b8a927e8c49de2636282e6dcadaab75bf49a354439a98a117d438d6a0f0073dcb05dd23ea1da31824103

    • SSDEEP

      6144:g78nTpnyRPYZWG5U5X5WqoAY7O3Q9KL8W7p7bo:28nkQEG254qFgOgoLxp7bo

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks