Overview

overview

10

Static

static

21d0776746...ac.exe

windows7-x64

10

21d0776746...ac.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    21d0776746f01313aede237b534288fa5fe4c85f44e8c4f2215157c9cffd32ac

  • Size

    198KB

  • Sample

    221106-lg2tnagbcr

  • MD5

    31c4a8f67795e922a6fdcd65611e791f

  • SHA1

    e9a1ccac88efe7182a974d5073f5efc7358a7e89

  • SHA256

    21d0776746f01313aede237b534288fa5fe4c85f44e8c4f2215157c9cffd32ac

  • SHA512

    09f07e4ccc270ced3ec57c46bc42ff1349f09b2557acfd1ec36e4efc4e5534944a2e2f1e88de21c056571f3ef76187965ba68ce6f1bf11b7f869d5041b603739

  • SSDEEP

    3072:cWYkDOpA8bOfxYeV7OayDZE999lCyUOwPPwaBzp:ReReYZE/DCyyPPT

Score
10/10
evasion

Malware Config

Targets

    • Target

      21d0776746f01313aede237b534288fa5fe4c85f44e8c4f2215157c9cffd32ac

    • Size

      198KB

    • MD5

      31c4a8f67795e922a6fdcd65611e791f

    • SHA1

      e9a1ccac88efe7182a974d5073f5efc7358a7e89

    • SHA256

      21d0776746f01313aede237b534288fa5fe4c85f44e8c4f2215157c9cffd32ac

    • SHA512

      09f07e4ccc270ced3ec57c46bc42ff1349f09b2557acfd1ec36e4efc4e5534944a2e2f1e88de21c056571f3ef76187965ba68ce6f1bf11b7f869d5041b603739

    • SSDEEP

      3072:cWYkDOpA8bOfxYeV7OayDZE999lCyUOwPPwaBzp:ReReYZE/DCyyPPT

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks