Overview

overview

8

Static

static

dd96f70183...d7.exe

windows7-x64

8

dd96f70183...d7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd96f70183fd6f9482243e04b02a75c66040bafa64f612aebc99b4302709f1d7

  • Size

    341KB

  • Sample

    221123-l1dwyagb4y

  • MD5

    13d33a9ff6c77a3b7d08a4557d0a5e67

  • SHA1

    78adf14b76c5f6ed6f94172ae1ea9ff756d65776

  • SHA256

    dd96f70183fd6f9482243e04b02a75c66040bafa64f612aebc99b4302709f1d7

  • SHA512

    00dcb19ac270b06914c35e38f467bd49d4f3829f74f4d98e1c2af7e6c73e43eff7613127b483653b6d35d2d4aa3ed64a8c0e562a1542786db6493df0faf016b8

  • SSDEEP

    6144:bLwrTiWBUMLRr4ruCg4b4m+HSyD3YxHQnkcJFo9FR0YxlHA/7:bLwrTiqBLR0uFkrW3sHdcJFGFRPHs7

Score
8/10
persistence

Malware Config

Targets

    • Target

      dd96f70183fd6f9482243e04b02a75c66040bafa64f612aebc99b4302709f1d7

    • Size

      341KB

    • MD5

      13d33a9ff6c77a3b7d08a4557d0a5e67

    • SHA1

      78adf14b76c5f6ed6f94172ae1ea9ff756d65776

    • SHA256

      dd96f70183fd6f9482243e04b02a75c66040bafa64f612aebc99b4302709f1d7

    • SHA512

      00dcb19ac270b06914c35e38f467bd49d4f3829f74f4d98e1c2af7e6c73e43eff7613127b483653b6d35d2d4aa3ed64a8c0e562a1542786db6493df0faf016b8

    • SSDEEP

      6144:bLwrTiWBUMLRr4ruCg4b4m+HSyD3YxHQnkcJFo9FR0YxlHA/7:bLwrTiqBLR0uFkrW3sHdcJFGFRPHs7

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks