Overview

overview

8

Static

static

1

4f784aae96...ae.exe

windows7-x64

8

4f784aae96...ae.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f784aae96a41f515b02f2789aba0e9745c2137d81e2d5808c7b28d9dbd0f0ae

  • Size

    205KB

  • Sample

    221011-s6cpdscbg4

  • MD5

    62742dbc51fa10feaba8b045d602fe70

  • SHA1

    04ac6c208b1b91f16da033c9795ace1f1b191f70

  • SHA256

    4f784aae96a41f515b02f2789aba0e9745c2137d81e2d5808c7b28d9dbd0f0ae

  • SHA512

    75ba821d99200584fe022237a064aa163fda03eb7a2e9d006d6f5cd9170a77138f6c5143c3776d5fdb26147992108a15dc41e963fbdf5000e4d7c5224ce4963f

  • SSDEEP

    6144:7PB6Etm9cMrfgtnUUGMkuU+CfaHktTmH2UIF65+:rXtm9c9nUiIrtvrF65+

Score
8/10
persistence

Malware Config

Targets

    • Target

      4f784aae96a41f515b02f2789aba0e9745c2137d81e2d5808c7b28d9dbd0f0ae

    • Size

      205KB

    • MD5

      62742dbc51fa10feaba8b045d602fe70

    • SHA1

      04ac6c208b1b91f16da033c9795ace1f1b191f70

    • SHA256

      4f784aae96a41f515b02f2789aba0e9745c2137d81e2d5808c7b28d9dbd0f0ae

    • SHA512

      75ba821d99200584fe022237a064aa163fda03eb7a2e9d006d6f5cd9170a77138f6c5143c3776d5fdb26147992108a15dc41e963fbdf5000e4d7c5224ce4963f

    • SSDEEP

      6144:7PB6Etm9cMrfgtnUUGMkuU+CfaHktTmH2UIF65+:rXtm9c9nUiIrtvrF65+

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks