Overview

overview

8

Static

static

dacc50b6c9...1f.exe

windows7-x64

8

dacc50b6c9...1f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    dacc50b6c9dd7ed5388ab9947e473effc0faf19686d6a42e6c1e72c80a021e1f

  • Size

    39KB

  • Sample

    221107-xzpgtsdga3

  • MD5

    0b6eca84b1386c95671242ffd7825731

  • SHA1

    c059035395dab8239784c92ec8ed39080672d601

  • SHA256

    dacc50b6c9dd7ed5388ab9947e473effc0faf19686d6a42e6c1e72c80a021e1f

  • SHA512

    fd35a735f7aa5f4e8f9effe916a13df6a4826fdd9a24cf0dc43368c4c128173bb93949543247956f7f086817f06b531c3eeefa1fbafb89993669edb47bf62cfc

  • SSDEEP

    768:30hvZ7K2gJSRzmKxBqg+9ZPba3QagR9DZGYVW6YXcTLNNr:kHSEHBq95XagR9lGYV/p

Score
8/10

Malware Config

Targets

    • Target

      dacc50b6c9dd7ed5388ab9947e473effc0faf19686d6a42e6c1e72c80a021e1f

    • Size

      39KB

    • MD5

      0b6eca84b1386c95671242ffd7825731

    • SHA1

      c059035395dab8239784c92ec8ed39080672d601

    • SHA256

      dacc50b6c9dd7ed5388ab9947e473effc0faf19686d6a42e6c1e72c80a021e1f

    • SHA512

      fd35a735f7aa5f4e8f9effe916a13df6a4826fdd9a24cf0dc43368c4c128173bb93949543247956f7f086817f06b531c3eeefa1fbafb89993669edb47bf62cfc

    • SSDEEP

      768:30hvZ7K2gJSRzmKxBqg+9ZPba3QagR9DZGYVW6YXcTLNNr:kHSEHBq95XagR9lGYV/p

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks