Overview

overview

8

Static

static

5664cd683e...e3.exe

windows7-x64

8

5664cd683e...e3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5664cd683eb0f76a689d6ea367f5fdcc9ecdcd7182076f856f24f9594c07f9e3

  • Size

    192KB

  • Sample

    221019-2s1nqsbgh5

  • MD5

    a1d3dd7ce9811e4fc730c47462e6ec50

  • SHA1

    debd989363a29158f3ab36f5a432684a93ddc1ee

  • SHA256

    5664cd683eb0f76a689d6ea367f5fdcc9ecdcd7182076f856f24f9594c07f9e3

  • SHA512

    e227517c2c97d7d5e4edc428321a14923ef6d640907449ab3dda5e0da193442a87bcb33abd07cc52e076155af0f36812866e7c1f5518dfcc07ad3766845fcd84

  • SSDEEP

    3072:aKg2l4/vZAe+Yxzv9CS080kGrUt+eqk3JF5rrRWcmg32+X2nLF:aKll4/vZAe+Yxzv9CStxG4kYlNDn2nR

Score
8/10
persistence

Malware Config

Targets

    • Target

      5664cd683eb0f76a689d6ea367f5fdcc9ecdcd7182076f856f24f9594c07f9e3

    • Size

      192KB

    • MD5

      a1d3dd7ce9811e4fc730c47462e6ec50

    • SHA1

      debd989363a29158f3ab36f5a432684a93ddc1ee

    • SHA256

      5664cd683eb0f76a689d6ea367f5fdcc9ecdcd7182076f856f24f9594c07f9e3

    • SHA512

      e227517c2c97d7d5e4edc428321a14923ef6d640907449ab3dda5e0da193442a87bcb33abd07cc52e076155af0f36812866e7c1f5518dfcc07ad3766845fcd84

    • SSDEEP

      3072:aKg2l4/vZAe+Yxzv9CS080kGrUt+eqk3JF5rrRWcmg32+X2nLF:aKll4/vZAe+Yxzv9CStxG4kYlNDn2nR

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks