Overview

overview

8

Static

static

f0641dcad7...5f.exe

windows7-x64

8

f0641dcad7...5f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0641dcad7e31c35c2849de8c5056650772c7f8bc2f4a3ca0c9db8ba9eaa9a5f

  • Size

    71KB

  • Sample

    221030-nwensaaccp

  • MD5

    92dc6b8c54f16406565881d44e07834a

  • SHA1

    05666a2dda74f3eba65e335eb4a264c6b022afe0

  • SHA256

    f0641dcad7e31c35c2849de8c5056650772c7f8bc2f4a3ca0c9db8ba9eaa9a5f

  • SHA512

    733745a8d0d814d8715588e9c22aea38c5680fa88c14b06d6b72d8b45ff05ee64c1b324d7e3dfc1b1cf4f1e5be707b8b1b8f6c2cbf01f0496da4117e04b476c6

  • SSDEEP

    1536:KKMonowh4ostPr2/kBmkWbpab+CtuMFxdWOo6CLvjs8wBjnU:Knonoros9Pkbpe+zOo6EwBjnU

Score
8/10

Malware Config

Targets

    • Target

      f0641dcad7e31c35c2849de8c5056650772c7f8bc2f4a3ca0c9db8ba9eaa9a5f

    • Size

      71KB

    • MD5

      92dc6b8c54f16406565881d44e07834a

    • SHA1

      05666a2dda74f3eba65e335eb4a264c6b022afe0

    • SHA256

      f0641dcad7e31c35c2849de8c5056650772c7f8bc2f4a3ca0c9db8ba9eaa9a5f

    • SHA512

      733745a8d0d814d8715588e9c22aea38c5680fa88c14b06d6b72d8b45ff05ee64c1b324d7e3dfc1b1cf4f1e5be707b8b1b8f6c2cbf01f0496da4117e04b476c6

    • SSDEEP

      1536:KKMonowh4ostPr2/kBmkWbpab+CtuMFxdWOo6CLvjs8wBjnU:Knonoros9Pkbpe+zOo6EwBjnU

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks