Overview

overview

8

Static

static

0490dbf0a1...1f.exe

windows7-x64

8

0490dbf0a1...1f.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0490dbf0a186a89514eeb9a9bf868aa8bca1ab563f96a0419709b24c00532c1f

  • Size

    250KB

  • Sample

    221029-bffvpafbbm

  • MD5

    0abf508b51b95471c694f7a509179b19

  • SHA1

    5d01020dfe6043437e93a812edc1fb49d04c0b2e

  • SHA256

    0490dbf0a186a89514eeb9a9bf868aa8bca1ab563f96a0419709b24c00532c1f

  • SHA512

    e3ee0d85861ddd1911d44cf7030b75119d26fdfd610ef17d6093995b994904b9e3f73ffa15e14581328c0f6b509137eb235702649542707804cfde7bff4ea06f

  • SSDEEP

    6144:oxZ39gKTDKvQ3CVtlN2B3abwgADEdHhC1/pWUB/Zp35+fLA:orP6vQ3Ct328MgADEdBC/VRpJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      0490dbf0a186a89514eeb9a9bf868aa8bca1ab563f96a0419709b24c00532c1f

    • Size

      250KB

    • MD5

      0abf508b51b95471c694f7a509179b19

    • SHA1

      5d01020dfe6043437e93a812edc1fb49d04c0b2e

    • SHA256

      0490dbf0a186a89514eeb9a9bf868aa8bca1ab563f96a0419709b24c00532c1f

    • SHA512

      e3ee0d85861ddd1911d44cf7030b75119d26fdfd610ef17d6093995b994904b9e3f73ffa15e14581328c0f6b509137eb235702649542707804cfde7bff4ea06f

    • SSDEEP

      6144:oxZ39gKTDKvQ3CVtlN2B3abwgADEdHhC1/pWUB/Zp35+fLA:orP6vQ3Ct328MgADEdBC/VRpJ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks