Overview

overview

8

Static

static

9acf545412...d5.exe

windows7-x64

8

9acf545412...d5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9acf54541248be2b8a87b1a53ced9b773a1105cef88609c0b964124b04b1efd5

  • Size

    320KB

  • Sample

    221107-nmp36agael

  • MD5

    0fc490606022a1c28f6ab1c7c1173917

  • SHA1

    cfb6799f17d08ec3e31a3fdb8b84591dd233604b

  • SHA256

    9acf54541248be2b8a87b1a53ced9b773a1105cef88609c0b964124b04b1efd5

  • SHA512

    9b9936fe0dfd8a13fd9c3878a51edc6af123dea7b5dcc2772deb4f47d2eda8d5608519ae1e5e2b1b01a70a67f201ec5e679d7ef94533bcce8f2dc17785b26f30

  • SSDEEP

    6144:haXhJwfyr9sr5mWVP2AD+ourtwxHC+4TVNtT:4XGi9s1mSxD+ouJw9BO

Score
8/10
persistence

Malware Config

Targets

    • Target

      9acf54541248be2b8a87b1a53ced9b773a1105cef88609c0b964124b04b1efd5

    • Size

      320KB

    • MD5

      0fc490606022a1c28f6ab1c7c1173917

    • SHA1

      cfb6799f17d08ec3e31a3fdb8b84591dd233604b

    • SHA256

      9acf54541248be2b8a87b1a53ced9b773a1105cef88609c0b964124b04b1efd5

    • SHA512

      9b9936fe0dfd8a13fd9c3878a51edc6af123dea7b5dcc2772deb4f47d2eda8d5608519ae1e5e2b1b01a70a67f201ec5e679d7ef94533bcce8f2dc17785b26f30

    • SSDEEP

      6144:haXhJwfyr9sr5mWVP2AD+ourtwxHC+4TVNtT:4XGi9s1mSxD+ouJw9BO

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks