Overview

overview

8

Static

static

088e431500...ce.exe

windows7-x64

8

088e431500...ce.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    088e431500f13ad5f96af8079b2e6704440bef6810903ce7f760336e65d7cece

  • Size

    359KB

  • Sample

    221121-tcdv2agd42

  • MD5

    03c98c932377086d5be24c119ff01175

  • SHA1

    0b93bd233ddc8c1cfb5886116f37fb7c1315a5ef

  • SHA256

    088e431500f13ad5f96af8079b2e6704440bef6810903ce7f760336e65d7cece

  • SHA512

    bf100d25e83e0043b9c86433968eb5f70395240c79428d51d7fb563ec14e99d394b3c753d7b2c6b686939e2a4f032baa726e9c1146eb526dd6da4ac6f7e80650

  • SSDEEP

    6144:xtF0wPmBjrtRAlXlNa01/Fjm+qbtPeXCOmdsP1F9nb54ceKVwCsI:xt6wPmNrtR+3ae/RmIrv4wzv

Score
8/10
persistence

Malware Config

Targets

    • Target

      088e431500f13ad5f96af8079b2e6704440bef6810903ce7f760336e65d7cece

    • Size

      359KB

    • MD5

      03c98c932377086d5be24c119ff01175

    • SHA1

      0b93bd233ddc8c1cfb5886116f37fb7c1315a5ef

    • SHA256

      088e431500f13ad5f96af8079b2e6704440bef6810903ce7f760336e65d7cece

    • SHA512

      bf100d25e83e0043b9c86433968eb5f70395240c79428d51d7fb563ec14e99d394b3c753d7b2c6b686939e2a4f032baa726e9c1146eb526dd6da4ac6f7e80650

    • SSDEEP

      6144:xtF0wPmBjrtRAlXlNa01/Fjm+qbtPeXCOmdsP1F9nb54ceKVwCsI:xt6wPmNrtR+3ae/RmIrv4wzv

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks