Overview

overview

8

Static

static

e7fd2e6741...33.exe

windows7-x64

1

e7fd2e6741...33.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7fd2e67413ea03e1a6bff920f5366f71e804cf8d28f1f1b287c665d3abb6933

  • Size

    171KB

  • Sample

    221028-31elxacfe5

  • MD5

    0ba28b1b953b10f94286b7d768db5860

  • SHA1

    1e0b7059707ad59a89909fd04da616a5190275d1

  • SHA256

    e7fd2e67413ea03e1a6bff920f5366f71e804cf8d28f1f1b287c665d3abb6933

  • SHA512

    4d738c11305bca75f37e31b1db51847eaa6d4633ab9012db9196644be8109f068d7c7ceffc0b813168268c78f8ca2b1c13e560bb108f2da8a1a3e9ed9bb531b3

  • SSDEEP

    3072:FW+1oS4l5OeuQdrmwvL8EqegUUR3YqQB2zzzzzzzzwF3zdUW3lrSzzH:Ffwl5IQdyfEmRgG

Score
8/10
persistence

Malware Config

Targets

    • Target

      e7fd2e67413ea03e1a6bff920f5366f71e804cf8d28f1f1b287c665d3abb6933

    • Size

      171KB

    • MD5

      0ba28b1b953b10f94286b7d768db5860

    • SHA1

      1e0b7059707ad59a89909fd04da616a5190275d1

    • SHA256

      e7fd2e67413ea03e1a6bff920f5366f71e804cf8d28f1f1b287c665d3abb6933

    • SHA512

      4d738c11305bca75f37e31b1db51847eaa6d4633ab9012db9196644be8109f068d7c7ceffc0b813168268c78f8ca2b1c13e560bb108f2da8a1a3e9ed9bb531b3

    • SSDEEP

      3072:FW+1oS4l5OeuQdrmwvL8EqegUUR3YqQB2zzzzzzzzwF3zdUW3lrSzzH:Ffwl5IQdyfEmRgG

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks