Overview

overview

8

Static

static

d5fa4b1723...c4.exe

windows7-x64

8

d5fa4b1723...c4.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5fa4b1723e9f66e627da2ad46e74e4c4eeba0783cbc917d6ef79ebe91462ac4

  • Size

    312KB

  • Sample

    221020-jxgsbacehj

  • MD5

    809ac69a3e964b97e8bc26f3007213b0

  • SHA1

    e26be135256df75c4141b5e6a088884309405340

  • SHA256

    d5fa4b1723e9f66e627da2ad46e74e4c4eeba0783cbc917d6ef79ebe91462ac4

  • SHA512

    b117fd0d0b81b73fe9cad5531686d465871c7cc55e3b67d36a76cdb9a4ff862d6aec563f42adf52d9c22cee91c0c76752bfa0fff17af9efc86e7082ac0bd5c9d

  • SSDEEP

    6144:YhaxRhcIOpQ5l3Yg+qxWLTZPu3ZVDUX0Fpq0hCaYxv2i3n/jeYQ9WnziGg:YMhcItnYgbaZwVG0fq0jYt/jeDQjg

Score
8/10
persistence

Malware Config

Targets

    • Target

      d5fa4b1723e9f66e627da2ad46e74e4c4eeba0783cbc917d6ef79ebe91462ac4

    • Size

      312KB

    • MD5

      809ac69a3e964b97e8bc26f3007213b0

    • SHA1

      e26be135256df75c4141b5e6a088884309405340

    • SHA256

      d5fa4b1723e9f66e627da2ad46e74e4c4eeba0783cbc917d6ef79ebe91462ac4

    • SHA512

      b117fd0d0b81b73fe9cad5531686d465871c7cc55e3b67d36a76cdb9a4ff862d6aec563f42adf52d9c22cee91c0c76752bfa0fff17af9efc86e7082ac0bd5c9d

    • SSDEEP

      6144:YhaxRhcIOpQ5l3Yg+qxWLTZPu3ZVDUX0Fpq0hCaYxv2i3n/jeYQ9WnziGg:YMhcItnYgbaZwVG0fq0jYt/jeDQjg

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks