Overview

overview

8

Static

static

b1e2e70468...28.exe

windows7-x64

8

b1e2e70468...28.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1e2e70468660bf93e3488844bc06bab6a499daf45fc74cc1a7bdbe56b9b0b28

  • Size

    174KB

  • Sample

    221106-rraqtafbe2

  • MD5

    0edca3ffbfd736040b7221b1ed9e34f6

  • SHA1

    39c5c59099a3521abcc0cfa30ebf6935af778118

  • SHA256

    b1e2e70468660bf93e3488844bc06bab6a499daf45fc74cc1a7bdbe56b9b0b28

  • SHA512

    44ba56fb6c00c875888c098e17553f2d4c56480df3e8e1d00e0100d66cdcf93c7b28198f00152ff1e01d7540e886b487ddf35ed4d0ff7e6e7958611c92291bd8

  • SSDEEP

    3072:J9Td9qwqGNdMwmdTDVz8NlFD9SOsFq2nuBpGD8JcWVgx+DcwyAfZklIzEKHhB:TTjqQNCwCc/9SOCqeOGDe3DcwykZkmzj

Score
8/10
persistence

Malware Config

Targets

    • Target

      b1e2e70468660bf93e3488844bc06bab6a499daf45fc74cc1a7bdbe56b9b0b28

    • Size

      174KB

    • MD5

      0edca3ffbfd736040b7221b1ed9e34f6

    • SHA1

      39c5c59099a3521abcc0cfa30ebf6935af778118

    • SHA256

      b1e2e70468660bf93e3488844bc06bab6a499daf45fc74cc1a7bdbe56b9b0b28

    • SHA512

      44ba56fb6c00c875888c098e17553f2d4c56480df3e8e1d00e0100d66cdcf93c7b28198f00152ff1e01d7540e886b487ddf35ed4d0ff7e6e7958611c92291bd8

    • SSDEEP

      3072:J9Td9qwqGNdMwmdTDVz8NlFD9SOsFq2nuBpGD8JcWVgx+DcwyAfZklIzEKHhB:TTjqQNCwCc/9SOCqeOGDe3DcwykZkmzj

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks