Overview

overview

8

Static

static

39878155e0...f1.exe

windows7-x64

8

39878155e0...f1.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39878155e060d6e9d159965fcbb3395e7d9cca3f17ff0164fbc22863e4341df1

  • Size

    357KB

  • Sample

    221123-lq9kvsca76

  • MD5

    2f802d2af925bf481342e2930a0a1bbc

  • SHA1

    357dce5f3fed2d67ab6eb51a3c971f6cf5397d89

  • SHA256

    39878155e060d6e9d159965fcbb3395e7d9cca3f17ff0164fbc22863e4341df1

  • SHA512

    64786ee942f491bff598b252e67df93ffff8a4cec87ab89e0d70de4533fe4519410e15826369ebf682f8ec837ffebd18547120bc7af45f1a1efd8298d9fd6aa2

  • SSDEEP

    6144:C4//qpBmFHs3czyOxW8RjSqjAvzxCaQHkRw0ZjOEd4xEtpzbpk:C46pBiHs3czfxW8B7jAv1CaXuIGGb2

Score
8/10
persistence

Malware Config

Targets

    • Target

      39878155e060d6e9d159965fcbb3395e7d9cca3f17ff0164fbc22863e4341df1

    • Size

      357KB

    • MD5

      2f802d2af925bf481342e2930a0a1bbc

    • SHA1

      357dce5f3fed2d67ab6eb51a3c971f6cf5397d89

    • SHA256

      39878155e060d6e9d159965fcbb3395e7d9cca3f17ff0164fbc22863e4341df1

    • SHA512

      64786ee942f491bff598b252e67df93ffff8a4cec87ab89e0d70de4533fe4519410e15826369ebf682f8ec837ffebd18547120bc7af45f1a1efd8298d9fd6aa2

    • SSDEEP

      6144:C4//qpBmFHs3czyOxW8RjSqjAvzxCaQHkRw0ZjOEd4xEtpzbpk:C46pBiHs3czfxW8B7jAv1CaXuIGGb2

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks