Overview

overview

8

Static

static

58a03ffed9...25.exe

windows7-x64

8

58a03ffed9...25.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    58a03ffed9dfd1e40f33533e753a5156b4f0aea6141241c88da8092ea28f7e25

  • Size

    1.2MB

  • Sample

    221011-jkxyrscef5

  • MD5

    2f124ecc985327a9d6301903a84934ab

  • SHA1

    4127429360e0da12c2bfa4bbde3f36f06a25a01e

  • SHA256

    58a03ffed9dfd1e40f33533e753a5156b4f0aea6141241c88da8092ea28f7e25

  • SHA512

    1a809b9addabbcb6d71d9dd841dffc1def7e2138d3f7f6bb9676cb73fd12922309198ae084ae571c3dfe510bd86e64bba379fb99aa331493d4ca272fc06087d1

  • SSDEEP

    12288:1cwUADV+rMO8IrRiFz5dZYMUQPQvGzb7ECWEwy/yy+ns6/:TbgrMz8R25UPQPd3Egqys

Score
8/10
persistence

Malware Config

Targets

    • Target

      58a03ffed9dfd1e40f33533e753a5156b4f0aea6141241c88da8092ea28f7e25

    • Size

      1.2MB

    • MD5

      2f124ecc985327a9d6301903a84934ab

    • SHA1

      4127429360e0da12c2bfa4bbde3f36f06a25a01e

    • SHA256

      58a03ffed9dfd1e40f33533e753a5156b4f0aea6141241c88da8092ea28f7e25

    • SHA512

      1a809b9addabbcb6d71d9dd841dffc1def7e2138d3f7f6bb9676cb73fd12922309198ae084ae571c3dfe510bd86e64bba379fb99aa331493d4ca272fc06087d1

    • SSDEEP

      12288:1cwUADV+rMO8IrRiFz5dZYMUQPQvGzb7ECWEwy/yy+ns6/:TbgrMz8R25UPQPd3Egqys

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks