Overview

overview

8

Static

static

Kostenrech...bH.exe

windows7-x64

8

Kostenrech...bH.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e747cdb21b2a90545ca8771bd0a3c9f0dce05a3228c4fe5b06666a32d5bbf8ec

  • Size

    95KB

  • Sample

    221011-ypmqxscaa9

  • MD5

    b3ebc9c089685f30e3121ab242445a75

  • SHA1

    c263a8b2bb2d18a0dce54545d2dfb297270cbfcc

  • SHA256

    e747cdb21b2a90545ca8771bd0a3c9f0dce05a3228c4fe5b06666a32d5bbf8ec

  • SHA512

    3bcc0c43d155c92f0ea527d18631da7631846c7027c523bf6ad07a0e2861bb7d76766c576eb17af84e65b6d5580bc820444639a26a1cfcd598e57f1a2d727ae0

  • SSDEEP

    1536:KZAywcQav82hJmQ2hJVjbVGakEcQa2eYvTpBewj90+Odg7lbqve2X+zPaM+zD3J:KZy/TO2ZkE/je+eN+O+s22X+vIDZ

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      Kostenrechnung 14.06.2013 Rechtsanwalt Dell Shop Online GmbH.com

    • Size

      95KB

    • MD5

      76a87ff75c86a7ddbb48ab19d170cc4c

    • SHA1

      a0deb6eb3d16e137d77f1fe2f40e72149cb4ef76

    • SHA256

      f1a33448b625ef9121e12f5a4c1ee920da39492ce83c6ce62467864db6932ec9

    • SHA512

      3494444b006a24557f880c449dc2fbb5f89a6c42e6e1ab65be522d1531897c852a8b5701418c549c8dd24307af1e62de74200156e2e1e339201f579e258c3966

    • SSDEEP

      1536:gZAywcQav82hJmQ2hJVjbVGakEcQa2eYvTpBewj90+Odg7lbqve2X+zPaM+zD3:gZy/TO2ZkE/je+eN+O+s22X+vID

    Score
    8/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks