Overview

overview

8

Static

static

d1ec465036...50.exe

windows7-x64

8

d1ec465036...50.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350

  • Size

    250KB

  • Sample

    221121-3b77xsbc72

  • MD5

    8e6ef4e640a0852cb8f31d12d409544a

  • SHA1

    5ba3ae0604c81b69e5aeda655b6b8d2ab96be7ed

  • SHA256

    d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350

  • SHA512

    5f897ca3c389d8c6a1c49a09024cacf45bab2a3d1e656b4956db4a352ef3bbcf7be3d995963f4d83b4c0c05e1f6cc0fae90b80fb4fa5446469986e3835bc73e6

  • SSDEEP

    6144:pA4A4A3clElclc8UGun1TBnIrre5H2VN6D:7ciu11nfsN6D

Score
8/10
persistence

Malware Config

Targets

    • Target

      d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350

    • Size

      250KB

    • MD5

      8e6ef4e640a0852cb8f31d12d409544a

    • SHA1

      5ba3ae0604c81b69e5aeda655b6b8d2ab96be7ed

    • SHA256

      d1ec46503692a455ece4aacb38a8bcdd46ea26da5b4ec028b1230cd940ca3350

    • SHA512

      5f897ca3c389d8c6a1c49a09024cacf45bab2a3d1e656b4956db4a352ef3bbcf7be3d995963f4d83b4c0c05e1f6cc0fae90b80fb4fa5446469986e3835bc73e6

    • SSDEEP

      6144:pA4A4A3clElclc8UGun1TBnIrre5H2VN6D:7ciu11nfsN6D

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks