Overview

overview

8

Static

static

ca870dcf07...fe.exe

windows7-x64

8

ca870dcf07...fe.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca870dcf0778dae699b07c15d43043689331d991f055ab3cb45945a53a3631fe

  • Size

    250KB

  • Sample

    221019-1kdcsshggp

  • MD5

    9073c9614ee67bed94100e0eb7ce1310

  • SHA1

    4beb4ffa5a0ec419406399f1a9791d9a2a5f3e58

  • SHA256

    ca870dcf0778dae699b07c15d43043689331d991f055ab3cb45945a53a3631fe

  • SHA512

    efe31ed0993c843302bca396fd95ecef690c93e5768bf3fd405666fc570f58b71ff101d1e8232a1df2463746998ddb500f77489063b5c7c1e00e930dfd057deb

  • SSDEEP

    6144:oxZ3xAUpFPVLyYsKBEzS12+yJIXWGVI6lx17Zi:oraUHPsKBE+4zeVI6vpZ

Score
8/10
persistence

Malware Config

Targets

    • Target

      ca870dcf0778dae699b07c15d43043689331d991f055ab3cb45945a53a3631fe

    • Size

      250KB

    • MD5

      9073c9614ee67bed94100e0eb7ce1310

    • SHA1

      4beb4ffa5a0ec419406399f1a9791d9a2a5f3e58

    • SHA256

      ca870dcf0778dae699b07c15d43043689331d991f055ab3cb45945a53a3631fe

    • SHA512

      efe31ed0993c843302bca396fd95ecef690c93e5768bf3fd405666fc570f58b71ff101d1e8232a1df2463746998ddb500f77489063b5c7c1e00e930dfd057deb

    • SSDEEP

      6144:oxZ3xAUpFPVLyYsKBEzS12+yJIXWGVI6lx17Zi:oraUHPsKBE+4zeVI6vpZ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks