Overview

overview

8

Static

static

44900d9077...59.exe

windows7-x64

8

44900d9077...59.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44900d907785e6eab71a08753cfc21f11658fe01c4535f75d1dd366b64defa59

  • Size

    305KB

  • Sample

    221019-2z5k9sccbl

  • MD5

    a11c8b82f008c0170f71445cd85ac740

  • SHA1

    9660b1325b9a33680d921d00c45aa9fa42c3cb48

  • SHA256

    44900d907785e6eab71a08753cfc21f11658fe01c4535f75d1dd366b64defa59

  • SHA512

    38906b54df6b54e2740fa8c450240e6c8fa2c3f7a27b9d5cf8ce4b85c1dfe16455b8489fc69c7907c4f25497abcff5f01019f1671a410e1625cfa697090c1d91

  • SSDEEP

    3072:XvVQD8/32kHMel6XewWpTGcIdmxX8XbBVtosPKCwt6ufdcp0qKFyD0u+W+CyDGH5:/Q8/32X1ywmxsNKC0hdvFyIuQSynx+r

Score
8/10
persistence

Malware Config

Targets

    • Target

      44900d907785e6eab71a08753cfc21f11658fe01c4535f75d1dd366b64defa59

    • Size

      305KB

    • MD5

      a11c8b82f008c0170f71445cd85ac740

    • SHA1

      9660b1325b9a33680d921d00c45aa9fa42c3cb48

    • SHA256

      44900d907785e6eab71a08753cfc21f11658fe01c4535f75d1dd366b64defa59

    • SHA512

      38906b54df6b54e2740fa8c450240e6c8fa2c3f7a27b9d5cf8ce4b85c1dfe16455b8489fc69c7907c4f25497abcff5f01019f1671a410e1625cfa697090c1d91

    • SSDEEP

      3072:XvVQD8/32kHMel6XewWpTGcIdmxX8XbBVtosPKCwt6ufdcp0qKFyD0u+W+CyDGH5:/Q8/32X1ywmxsNKC0hdvFyIuQSynx+r

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks