Overview

overview

10

Static

static

197ea8de5f...71.exe

windows7-x64

10

197ea8de5f...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    197ea8de5fcf6744096aaf9a85d4dd8d104db965b13f1a77416c36a508d38a71

  • Size

    552KB

  • Sample

    221020-k52ywsehfr

  • MD5

    5613b030b44bc903a4aa61f4b4a43227

  • SHA1

    1737400f9d32573fdbd315ff807c5ccf23b594dc

  • SHA256

    197ea8de5fcf6744096aaf9a85d4dd8d104db965b13f1a77416c36a508d38a71

  • SHA512

    f94832203703aea63ec09a1476cc3fa6fdba9e46b14036371c22606099315e6f4e22f62455e4c364f71543242ab1f76c28689cf560ce24caa68b252e2a872ebc

  • SSDEEP

    12288:Zu542bSJiC3OoUB5hOYcgDNWN7c9Y4LVF6:Zr2bSQC3ODB5hODaNw4zLL6

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      197ea8de5fcf6744096aaf9a85d4dd8d104db965b13f1a77416c36a508d38a71

    • Size

      552KB

    • MD5

      5613b030b44bc903a4aa61f4b4a43227

    • SHA1

      1737400f9d32573fdbd315ff807c5ccf23b594dc

    • SHA256

      197ea8de5fcf6744096aaf9a85d4dd8d104db965b13f1a77416c36a508d38a71

    • SHA512

      f94832203703aea63ec09a1476cc3fa6fdba9e46b14036371c22606099315e6f4e22f62455e4c364f71543242ab1f76c28689cf560ce24caa68b252e2a872ebc

    • SSDEEP

      12288:Zu542bSJiC3OoUB5hOYcgDNWN7c9Y4LVF6:Zr2bSQC3ODB5hODaNw4zLL6

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks