Overview

overview

8

Static

static

da2b8a6a0b...a1.exe

windows7-x64

8

da2b8a6a0b...a1.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    da2b8a6a0bd95c73ba43827746f9179d81b6076eefbcb4b620e16b62a44d6aa1

  • Size

    149KB

  • Sample

    221107-l5f7vsdden

  • MD5

    0cf803d35773d88458fb9b7b36561dd1

  • SHA1

    df3cdc1968b98838bf89746010f42f3b0e51d19a

  • SHA256

    da2b8a6a0bd95c73ba43827746f9179d81b6076eefbcb4b620e16b62a44d6aa1

  • SHA512

    04b31bb575c11d6df8108830dc489a45f457d41d2f6cfca194ab72e02dc90231b4653d9e7948af086d34f059bfc3c1b88ddd59a56ad94a8aab737df36a5efab7

  • SSDEEP

    3072:jzvWkW5qWAP1n5Fgtbk0FBV24k9OvjV1:jzvzdWM5GtQzYjV1

Score
8/10
persistence

Malware Config

Targets

    • Target

      da2b8a6a0bd95c73ba43827746f9179d81b6076eefbcb4b620e16b62a44d6aa1

    • Size

      149KB

    • MD5

      0cf803d35773d88458fb9b7b36561dd1

    • SHA1

      df3cdc1968b98838bf89746010f42f3b0e51d19a

    • SHA256

      da2b8a6a0bd95c73ba43827746f9179d81b6076eefbcb4b620e16b62a44d6aa1

    • SHA512

      04b31bb575c11d6df8108830dc489a45f457d41d2f6cfca194ab72e02dc90231b4653d9e7948af086d34f059bfc3c1b88ddd59a56ad94a8aab737df36a5efab7

    • SSDEEP

      3072:jzvWkW5qWAP1n5Fgtbk0FBV24k9OvjV1:jzvzdWM5GtQzYjV1

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks