Overview

overview

8

Static

static

102ec5eafb...37.exe

windows7-x64

8

102ec5eafb...37.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    102ec5eafb430627aa8545e14a53131b16eb513094e6ddeaf0d12b4765af5337

  • Size

    175KB

  • Sample

    221123-22xnfaed81

  • MD5

    52f06b92eeb0c10dee048bcfde75fccf

  • SHA1

    4ae99fcd71b1633d54ce73550f4f8fddcb02d0a5

  • SHA256

    102ec5eafb430627aa8545e14a53131b16eb513094e6ddeaf0d12b4765af5337

  • SHA512

    e19e54a236e9a38aac4c9d52260df1d5481acd1d49632b3d35f52ca600fa61e5a59750cf647d42206bb0c7f026289edc35f1a4a04d29976559045b43ab49c113

  • SSDEEP

    3072:a2gr9xeinoMEZi3nHJl+cLjvAGvs1XOJaHO0hWf/xFNiqipS+97jlI9Ajis9KXW:aP9xRoMEZ8aczvsJOJaHgPNiqV47+9fu

Score
8/10
persistence

Malware Config

Targets

    • Target

      102ec5eafb430627aa8545e14a53131b16eb513094e6ddeaf0d12b4765af5337

    • Size

      175KB

    • MD5

      52f06b92eeb0c10dee048bcfde75fccf

    • SHA1

      4ae99fcd71b1633d54ce73550f4f8fddcb02d0a5

    • SHA256

      102ec5eafb430627aa8545e14a53131b16eb513094e6ddeaf0d12b4765af5337

    • SHA512

      e19e54a236e9a38aac4c9d52260df1d5481acd1d49632b3d35f52ca600fa61e5a59750cf647d42206bb0c7f026289edc35f1a4a04d29976559045b43ab49c113

    • SSDEEP

      3072:a2gr9xeinoMEZi3nHJl+cLjvAGvs1XOJaHO0hWf/xFNiqipS+97jlI9Ajis9KXW:aP9xRoMEZ8aczvsJOJaHgPNiqV47+9fu

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks