General

  • Target

    g6f4bm0tdm.exe

  • Size

    223KB

  • Sample

    221026-zhra7shab4

  • MD5

    9d2b9fd161fb18a5da322473c57cf394

  • SHA1

    32b0687f52565168bf1e8e8e3693f44f70e2dd43

  • SHA256

    d2861c70a69ae1328332929d40ac763e63bac543460c6f8be367fcf44c1f0ad5

  • SHA512

    45db55aca3e02dc0905f3204c528f6d2601e3c10f893dfcedc0bb0e42068f1f6c8805107bfa79a4db82b778e298782459d10a792840f9f9404622a8ebf2cd2b9

  • SSDEEP

    6144:TjJuur+/4W9nZJM21+WzY5UysAOlWZX/:PL+/4W9DHgsON

Score
6/10

Malware Config

Targets

    • Target

      g6f4bm0tdm.exe

    • Size

      223KB

    • MD5

      9d2b9fd161fb18a5da322473c57cf394

    • SHA1

      32b0687f52565168bf1e8e8e3693f44f70e2dd43

    • SHA256

      d2861c70a69ae1328332929d40ac763e63bac543460c6f8be367fcf44c1f0ad5

    • SHA512

      45db55aca3e02dc0905f3204c528f6d2601e3c10f893dfcedc0bb0e42068f1f6c8805107bfa79a4db82b778e298782459d10a792840f9f9404622a8ebf2cd2b9

    • SSDEEP

      6144:TjJuur+/4W9nZJM21+WzY5UysAOlWZX/:PL+/4W9DHgsON

    Score
    6/10
    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks