Overview

overview

8

Static

static

1

fca433a52c...37.exe

windows7-x64

8

fca433a52c...37.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fca433a52cd8d1d50fb1ccf7e511362de7c65309331ae4af4a79cecbf508a637

  • Size

    205KB

  • Sample

    221030-nrlljaaafl

  • MD5

    571b59595589be1c9e4c60d277ace9a0

  • SHA1

    0b085b239483eba4b9c19db92cb3e1a4ec371d02

  • SHA256

    fca433a52cd8d1d50fb1ccf7e511362de7c65309331ae4af4a79cecbf508a637

  • SHA512

    ddb5e83d26cd73230653b25116c0caeaf00acf9e1440dad399cece4dec00b1506961611ed788b36ef5cae26e6b5c44d1288f45f2f2932d9b0c2d2e8e301b6c8e

  • SSDEEP

    3072:bS8BCfoDaXJNMQW1km6QVoXAl1k4M5jINDlmNYq8exfSXnyY6Q5wMPfqjn8aeqCL:bPB6EQ3HQeXAVM5sJmN18ek7KMW83f0s

Score
8/10
persistence

Malware Config

Targets

    • Target

      fca433a52cd8d1d50fb1ccf7e511362de7c65309331ae4af4a79cecbf508a637

    • Size

      205KB

    • MD5

      571b59595589be1c9e4c60d277ace9a0

    • SHA1

      0b085b239483eba4b9c19db92cb3e1a4ec371d02

    • SHA256

      fca433a52cd8d1d50fb1ccf7e511362de7c65309331ae4af4a79cecbf508a637

    • SHA512

      ddb5e83d26cd73230653b25116c0caeaf00acf9e1440dad399cece4dec00b1506961611ed788b36ef5cae26e6b5c44d1288f45f2f2932d9b0c2d2e8e301b6c8e

    • SSDEEP

      3072:bS8BCfoDaXJNMQW1km6QVoXAl1k4M5jINDlmNYq8exfSXnyY6Q5wMPfqjn8aeqCL:bPB6EQ3HQeXAVM5sJmN18ek7KMW83f0s

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks