Overview

overview

8

Static

static

073a2f9c15...ef.exe

windows7-x64

8

073a2f9c15...ef.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef

  • Size

    170KB

  • Sample

    221028-wq8nnsaagr

  • MD5

    0b25185fbe39bbbd8aab2daaa0de0924

  • SHA1

    e0fea4569f3b5b924293fdb0c8c3313c222280ca

  • SHA256

    073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef

  • SHA512

    3a2b86afb2107c8e536bfea1825808a1d8be0370a5105df9163585f28d7835ea31673397e5163d20c9e259cec66b38a081525c1436707baa9a7dd6d099acbe06

  • SSDEEP

    3072:DOp8KRaug8q9/ZXoOIeBBMLE0Y11rP3jfkvpoGoFjT7rEzmZ/B9Ww2CUQGO/bF0P:iCKRaczLE0ofkvpoGoqzY3zF0rth

Score
8/10
persistence

Malware Config

Targets

    • Target

      073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef

    • Size

      170KB

    • MD5

      0b25185fbe39bbbd8aab2daaa0de0924

    • SHA1

      e0fea4569f3b5b924293fdb0c8c3313c222280ca

    • SHA256

      073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef

    • SHA512

      3a2b86afb2107c8e536bfea1825808a1d8be0370a5105df9163585f28d7835ea31673397e5163d20c9e259cec66b38a081525c1436707baa9a7dd6d099acbe06

    • SSDEEP

      3072:DOp8KRaug8q9/ZXoOIeBBMLE0Y11rP3jfkvpoGoFjT7rEzmZ/B9Ww2CUQGO/bF0P:iCKRaczLE0ofkvpoGoqzY3zF0rth

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks