Overview

overview

8

Static

static

a1bc30ae56...bd.exe

windows7-x64

8

a1bc30ae56...bd.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1bc30ae56247a8a7c924b8c04284359c24466b1e14d70fdeb91eb2fcc2700bd

  • Size

    37KB

  • Sample

    221021-f4ckdsdgd3

  • MD5

    705dd8ca51dd67a5387469ea2d5bb299

  • SHA1

    7a9fe18398025107b8329853f1ee965c63c9fce5

  • SHA256

    a1bc30ae56247a8a7c924b8c04284359c24466b1e14d70fdeb91eb2fcc2700bd

  • SHA512

    1786817600c77bc8abfcea5c54ea3b55a99745f9f9c385916d92f89d604879110406252b8ea15c591d2a6259db4a168caf21b0ae0d125e32f0c1c6a074e4632b

  • SSDEEP

    768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrE:j0Rbb5WRQYt9ir/2wraT

Score
8/10

Malware Config

Targets

    • Target

      a1bc30ae56247a8a7c924b8c04284359c24466b1e14d70fdeb91eb2fcc2700bd

    • Size

      37KB

    • MD5

      705dd8ca51dd67a5387469ea2d5bb299

    • SHA1

      7a9fe18398025107b8329853f1ee965c63c9fce5

    • SHA256

      a1bc30ae56247a8a7c924b8c04284359c24466b1e14d70fdeb91eb2fcc2700bd

    • SHA512

      1786817600c77bc8abfcea5c54ea3b55a99745f9f9c385916d92f89d604879110406252b8ea15c591d2a6259db4a168caf21b0ae0d125e32f0c1c6a074e4632b

    • SSDEEP

      768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrE:j0Rbb5WRQYt9ir/2wraT

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks