Overview

overview

10

Static

static

a93eb7e4b4...f7.exe

windows7-x64

10

a93eb7e4b4...f7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a93eb7e4b4d51b224dfb45fc8bdd988c2fc0878b2f28e46bf866dad288f01af7

  • Size

    130KB

  • Sample

    221108-qszwnaaaf6

  • MD5

    625084a8ab051ccb08d52687334a9048

  • SHA1

    99082b6d1029799d158635a5acf6588e21f7aea7

  • SHA256

    a93eb7e4b4d51b224dfb45fc8bdd988c2fc0878b2f28e46bf866dad288f01af7

  • SHA512

    af7afda8cb9fd2b2fb9fe2f27a4f329e9b5a47e33be15d453f22938272c1a4b000666b9520b1eba08a79be6e405bff345bfde62ff1475fc407910232092e3330

  • SSDEEP

    1536:R6Dqee3cp49xXbOLbxflu0dqvw3XwTnvQAPKk5YdQ7KseUDYf6SwQ9yxr19DpHs:4BS24rrOLneL7lKk5YKO5JyrQ9yxr1g

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      a93eb7e4b4d51b224dfb45fc8bdd988c2fc0878b2f28e46bf866dad288f01af7

    • Size

      130KB

    • MD5

      625084a8ab051ccb08d52687334a9048

    • SHA1

      99082b6d1029799d158635a5acf6588e21f7aea7

    • SHA256

      a93eb7e4b4d51b224dfb45fc8bdd988c2fc0878b2f28e46bf866dad288f01af7

    • SHA512

      af7afda8cb9fd2b2fb9fe2f27a4f329e9b5a47e33be15d453f22938272c1a4b000666b9520b1eba08a79be6e405bff345bfde62ff1475fc407910232092e3330

    • SSDEEP

      1536:R6Dqee3cp49xXbOLbxflu0dqvw3XwTnvQAPKk5YdQ7KseUDYf6SwQ9yxr19DpHs:4BS24rrOLneL7lKk5YKO5JyrQ9yxr1g

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks