Overview

overview

8

Static

static

1d078cc344...22.exe

windows7-x64

8

1d078cc344...22.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d078cc34492ea711bb39732a1db9b1c3419c63dad443ca3bbad423cc1de1e22

  • Size

    300KB

  • Sample

    221020-k5ehlafaf2

  • MD5

    80de78481817ad4e1a35d9a24dbc6bc0

  • SHA1

    a5b3a2f725a1b2536c1364c6c5a0416a41b03203

  • SHA256

    1d078cc34492ea711bb39732a1db9b1c3419c63dad443ca3bbad423cc1de1e22

  • SHA512

    53c087077e4c7f7d52c45c5dc96d14986ec79dd715b7eeb6e05ab2ef06c381da1c194073e1337fa4a9ced06fc679110754f16ab925e0153c33e306996d5444de

  • SSDEEP

    6144:NK6Qqgs2ejDqdD8bM4R3b7I9spuvsuxmd5atzZwwjHV/r7FNHkmh:NK6ss2egD8gAg9spuvsr5aTwwjHVvFi

Score
8/10
persistence

Malware Config

Targets

    • Target

      1d078cc34492ea711bb39732a1db9b1c3419c63dad443ca3bbad423cc1de1e22

    • Size

      300KB

    • MD5

      80de78481817ad4e1a35d9a24dbc6bc0

    • SHA1

      a5b3a2f725a1b2536c1364c6c5a0416a41b03203

    • SHA256

      1d078cc34492ea711bb39732a1db9b1c3419c63dad443ca3bbad423cc1de1e22

    • SHA512

      53c087077e4c7f7d52c45c5dc96d14986ec79dd715b7eeb6e05ab2ef06c381da1c194073e1337fa4a9ced06fc679110754f16ab925e0153c33e306996d5444de

    • SSDEEP

      6144:NK6Qqgs2ejDqdD8bM4R3b7I9spuvsuxmd5atzZwwjHV/r7FNHkmh:NK6ss2egD8gAg9spuvsr5aTwwjHVvFi

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks