Overview

overview

8

Static

static

5ca93ceb6b...8a.exe

windows7-x64

8

5ca93ceb6b...8a.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ca93ceb6bed6bcd52ef7611e03cb20b7aaa2fe7a1d7b34b6ab7ef1ec037178a

  • Size

    321KB

  • Sample

    221029-ymrbbscfg5

  • MD5

    543362c6f979d623eb3b04cbbe45f832

  • SHA1

    e4630d62aa68abecf68efc900eb3bc0755912f70

  • SHA256

    5ca93ceb6bed6bcd52ef7611e03cb20b7aaa2fe7a1d7b34b6ab7ef1ec037178a

  • SHA512

    abbc26abbd874bf9c2959aa03ac67f4b0ac79c91688fa525c2feb743bd548c255e758d5235a8b804d7fa7ff82deb4d3bccb8df5c7314c5d16655b63cedcafc46

  • SSDEEP

    6144:iT+FQoXd7oswMHScIOq1G/PqRnC2CkErfoc:VFhXtycBqwqRC2gcc

Score
8/10
persistence

Malware Config

Targets

    • Target

      5ca93ceb6bed6bcd52ef7611e03cb20b7aaa2fe7a1d7b34b6ab7ef1ec037178a

    • Size

      321KB

    • MD5

      543362c6f979d623eb3b04cbbe45f832

    • SHA1

      e4630d62aa68abecf68efc900eb3bc0755912f70

    • SHA256

      5ca93ceb6bed6bcd52ef7611e03cb20b7aaa2fe7a1d7b34b6ab7ef1ec037178a

    • SHA512

      abbc26abbd874bf9c2959aa03ac67f4b0ac79c91688fa525c2feb743bd548c255e758d5235a8b804d7fa7ff82deb4d3bccb8df5c7314c5d16655b63cedcafc46

    • SSDEEP

      6144:iT+FQoXd7oswMHScIOq1G/PqRnC2CkErfoc:VFhXtycBqwqRC2gcc

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks