Overview

overview

10

Static

static

25fd73ffd2...e0.exe

windows7-x64

10

25fd73ffd2...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25fd73ffd2ab68531b7de50a141eb442ace3fbbccdf4eef695021048dd2205e0

  • Size

    528KB

  • Sample

    221011-j3ej5sdfhr

  • MD5

    75cded002eb441aef67af3e5cc97c49d

  • SHA1

    8588a13aaa8ae50609e419dea32f363ad8f6d704

  • SHA256

    25fd73ffd2ab68531b7de50a141eb442ace3fbbccdf4eef695021048dd2205e0

  • SHA512

    d6c63e4b72975cf787b637f26bbac5dd6276abf1bb0a240020b78d70f7921371ab5730a88c47ade38ff5b3c026075c435a02d99eeea58c2d1708d100f6aa86f7

  • SSDEEP

    12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoU1:Ak0bNs9FtyeI+1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      25fd73ffd2ab68531b7de50a141eb442ace3fbbccdf4eef695021048dd2205e0

    • Size

      528KB

    • MD5

      75cded002eb441aef67af3e5cc97c49d

    • SHA1

      8588a13aaa8ae50609e419dea32f363ad8f6d704

    • SHA256

      25fd73ffd2ab68531b7de50a141eb442ace3fbbccdf4eef695021048dd2205e0

    • SHA512

      d6c63e4b72975cf787b637f26bbac5dd6276abf1bb0a240020b78d70f7921371ab5730a88c47ade38ff5b3c026075c435a02d99eeea58c2d1708d100f6aa86f7

    • SSDEEP

      12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoU1:Ak0bNs9FtyeI+1

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks