Overview

overview

10

Static

static

220b2e3e33...db.exe

windows7-x64

10

220b2e3e33...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    220b2e3e3374f8e58b8b72c3b0f213d9c24be7a71cf81a2fde991155fa0b83db

  • Size

    528KB

  • Sample

    221011-j4hcesdgem

  • MD5

    5e6237abf1a94a5b568e1a67ea8d93d9

  • SHA1

    42d00979d73785101dc28b9cb6b0d285fb6b7feb

  • SHA256

    220b2e3e3374f8e58b8b72c3b0f213d9c24be7a71cf81a2fde991155fa0b83db

  • SHA512

    7e4e5199e774b07291eb56e052d3a41822652ac56b48483435ceafe84929d6c0604c4af3efd97ef9bda388dfd18991ee04f7aa6f4d698e312b544dc429e1a361

  • SSDEEP

    12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoU6:Ak0bNs9FtyeI+6

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      220b2e3e3374f8e58b8b72c3b0f213d9c24be7a71cf81a2fde991155fa0b83db

    • Size

      528KB

    • MD5

      5e6237abf1a94a5b568e1a67ea8d93d9

    • SHA1

      42d00979d73785101dc28b9cb6b0d285fb6b7feb

    • SHA256

      220b2e3e3374f8e58b8b72c3b0f213d9c24be7a71cf81a2fde991155fa0b83db

    • SHA512

      7e4e5199e774b07291eb56e052d3a41822652ac56b48483435ceafe84929d6c0604c4af3efd97ef9bda388dfd18991ee04f7aa6f4d698e312b544dc429e1a361

    • SSDEEP

      12288:O1T9O/qYv8/iWlq0bZBZsI+oG1KsFXyeIeoU6:Ak0bNs9FtyeI+6

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks