Overview

overview

8

Static

static

5

122dfa4c34...b5.exe

windows7-x64

8

122dfa4c34...b5.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    122dfa4c348f45a12fb154a8304004904e475512cb609f60fa32a34bd8bbb1b5

  • Size

    853KB

  • Sample

    221012-ssea3ahca6

  • MD5

    6c24891108ca64ddea855fda9ca1b720

  • SHA1

    f5dc226aaa4954f7777914de0dca2ab3bb95dd50

  • SHA256

    122dfa4c348f45a12fb154a8304004904e475512cb609f60fa32a34bd8bbb1b5

  • SHA512

    d3896cd4fb11d0767540dd13688eb85a28c02373861cbd65fad77ce37e35d9c407bc0b18d246e102113babb3a56ea37ea353d492a9a91b2dba2c717ae3b950bf

  • SSDEEP

    12288:jhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aIcanfaSvae05Dh:pRmJkcoQricOIQxiZY1iaIpdvaeu

Score
8/10
persistence

Malware Config

Targets

    • Target

      122dfa4c348f45a12fb154a8304004904e475512cb609f60fa32a34bd8bbb1b5

    • Size

      853KB

    • MD5

      6c24891108ca64ddea855fda9ca1b720

    • SHA1

      f5dc226aaa4954f7777914de0dca2ab3bb95dd50

    • SHA256

      122dfa4c348f45a12fb154a8304004904e475512cb609f60fa32a34bd8bbb1b5

    • SHA512

      d3896cd4fb11d0767540dd13688eb85a28c02373861cbd65fad77ce37e35d9c407bc0b18d246e102113babb3a56ea37ea353d492a9a91b2dba2c717ae3b950bf

    • SSDEEP

      12288:jhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aIcanfaSvae05Dh:pRmJkcoQricOIQxiZY1iaIpdvaeu

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks