Overview

overview

8

Static

static

07d4d9cd4e...e3.exe

windows7-x64

8

07d4d9cd4e...e3.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    07d4d9cd4e17c8405bc9bfdfb8a188bcd212c1274f60b8bf65d5d5b6e92044e3

  • Size

    596KB

  • Sample

    221020-zjy3fadggk

  • MD5

    a03f82718597818c51c49ee9d4a0c3c0

  • SHA1

    b8d508831e2c89a19a69b43a5d7ec1d63e284b10

  • SHA256

    07d4d9cd4e17c8405bc9bfdfb8a188bcd212c1274f60b8bf65d5d5b6e92044e3

  • SHA512

    8fa62029ed35d045ed41b459f082e978109687162d0c61d0ce3b3a9a10fd4016f37faae05f34cb7be41535eccc2931b57b5ab7f28c151c87cc95e42f5568ee1b

  • SSDEEP

    12288:9G944dAqcN1ezI439EdP9pk3VfQx6uDOfUJYG:0qv2EdYlQxNDqUX

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      07d4d9cd4e17c8405bc9bfdfb8a188bcd212c1274f60b8bf65d5d5b6e92044e3

    • Size

      596KB

    • MD5

      a03f82718597818c51c49ee9d4a0c3c0

    • SHA1

      b8d508831e2c89a19a69b43a5d7ec1d63e284b10

    • SHA256

      07d4d9cd4e17c8405bc9bfdfb8a188bcd212c1274f60b8bf65d5d5b6e92044e3

    • SHA512

      8fa62029ed35d045ed41b459f082e978109687162d0c61d0ce3b3a9a10fd4016f37faae05f34cb7be41535eccc2931b57b5ab7f28c151c87cc95e42f5568ee1b

    • SSDEEP

      12288:9G944dAqcN1ezI439EdP9pk3VfQx6uDOfUJYG:0qv2EdYlQxNDqUX

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks