Overview

overview

8

Static

static

2bb4360e9f...0a.exe

windows7-x64

8

2bb4360e9f...0a.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bb4360e9f1884f2fca6fc2efd37d5ca334718c72f8ecf36ef65b3119076e20a

  • Size

    1.2MB

  • Sample

    221011-j1k9xadfaj

  • MD5

    7c3b81b0b5091745f9c1e7d95282a461

  • SHA1

    0f07249a857bfb70db448249e4e2f4cf17ce70b8

  • SHA256

    2bb4360e9f1884f2fca6fc2efd37d5ca334718c72f8ecf36ef65b3119076e20a

  • SHA512

    728ed625d4a8e8e566e3304db4f097332a0bf92890655631d41619d6449980a2a9baf20f43f19000e5ca970a38b7cdd267bb5a5eb90a6f4e593086c83415593e

  • SSDEEP

    12288:1cwUADV+rMO8IrRiFz5dZYMUQPQvGzbVrJGuNvtqRi:TbgrMz8R25UPQPdZrtN1i

Score
8/10
persistence

Malware Config

Targets

    • Target

      2bb4360e9f1884f2fca6fc2efd37d5ca334718c72f8ecf36ef65b3119076e20a

    • Size

      1.2MB

    • MD5

      7c3b81b0b5091745f9c1e7d95282a461

    • SHA1

      0f07249a857bfb70db448249e4e2f4cf17ce70b8

    • SHA256

      2bb4360e9f1884f2fca6fc2efd37d5ca334718c72f8ecf36ef65b3119076e20a

    • SHA512

      728ed625d4a8e8e566e3304db4f097332a0bf92890655631d41619d6449980a2a9baf20f43f19000e5ca970a38b7cdd267bb5a5eb90a6f4e593086c83415593e

    • SSDEEP

      12288:1cwUADV+rMO8IrRiFz5dZYMUQPQvGzbVrJGuNvtqRi:TbgrMz8R25UPQPdZrtN1i

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks