Overview

overview

8

Static

static

1750e40308...65.exe

windows7-x64

8

1750e40308...65.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1750e40308419b4c7e4ee7934cd48b469718fcc0288090eac828b9d3b636fd65

  • Size

    267KB

  • Sample

    221107-rhc5ksbad8

  • MD5

    0d2a33308a19ebc24ddaef450cc65268

  • SHA1

    7ba0923b3a44af654025fba884c5df0fc0501453

  • SHA256

    1750e40308419b4c7e4ee7934cd48b469718fcc0288090eac828b9d3b636fd65

  • SHA512

    8382920d4502a520ab53d4cebbc5a5233461648eabc2b8f07f439b2c287f5ecd6ba1640666940034cedfbb7c77fb48c8c904f95939e3fec47de6e6a2321963c9

  • SSDEEP

    6144:KxZaok06CN5fmVQH0heA8nXiUSz7ArwAVpN2u6:Ke015+Vq+8XrqMbVpI

Score
8/10
persistence

Malware Config

Targets

    • Target

      1750e40308419b4c7e4ee7934cd48b469718fcc0288090eac828b9d3b636fd65

    • Size

      267KB

    • MD5

      0d2a33308a19ebc24ddaef450cc65268

    • SHA1

      7ba0923b3a44af654025fba884c5df0fc0501453

    • SHA256

      1750e40308419b4c7e4ee7934cd48b469718fcc0288090eac828b9d3b636fd65

    • SHA512

      8382920d4502a520ab53d4cebbc5a5233461648eabc2b8f07f439b2c287f5ecd6ba1640666940034cedfbb7c77fb48c8c904f95939e3fec47de6e6a2321963c9

    • SSDEEP

      6144:KxZaok06CN5fmVQH0heA8nXiUSz7ArwAVpN2u6:Ke015+Vq+8XrqMbVpI

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks