General

  • Target

    089e72dc61ae928d13c5fc1330e3837e63486bed0884501dc61249cd62357c86

  • Size

    408KB

  • Sample

    221012-v8g31adgh6

  • MD5

    65c0bf94d742fa548d9c151de7a468e0

  • SHA1

    16e4271a2fd87e0677cebe4f0f7644f392dfc9c3

  • SHA256

    089e72dc61ae928d13c5fc1330e3837e63486bed0884501dc61249cd62357c86

  • SHA512

    1eff83ad95385a7c0efcb6a871318f3d69494f9960a70c5c199e634df15e2b4e26deecbc42c721cf1bc84de3d3053e917c41972f67feefbe6f6846ff39f59b92

  • SSDEEP

    12288:fZ41WeREBTvYBBxzgutXrYeWjohQdFYAs8zkv5lGWpQ:y1JWvKOWYiGdFds8Yv5

Score
10/10

Malware Config

Targets

    • Target

      089e72dc61ae928d13c5fc1330e3837e63486bed0884501dc61249cd62357c86

    • Size

      408KB

    • MD5

      65c0bf94d742fa548d9c151de7a468e0

    • SHA1

      16e4271a2fd87e0677cebe4f0f7644f392dfc9c3

    • SHA256

      089e72dc61ae928d13c5fc1330e3837e63486bed0884501dc61249cd62357c86

    • SHA512

      1eff83ad95385a7c0efcb6a871318f3d69494f9960a70c5c199e634df15e2b4e26deecbc42c721cf1bc84de3d3053e917c41972f67feefbe6f6846ff39f59b92

    • SSDEEP

      12288:fZ41WeREBTvYBBxzgutXrYeWjohQdFYAs8zkv5lGWpQ:y1JWvKOWYiGdFds8Yv5

    Score
    10/10
    • Modifies firewall policy service

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks