Overview

overview

8

Static

static

af81f01689...45.exe

windows7-x64

8

af81f01689...45.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    af81f0168995870867c314cdd601213fb4b8d669e98b981e40f662e2ab9b0145

  • Size

    200KB

  • Sample

    221123-lqcwwsfd6t

  • MD5

    1a6958de8fae26b22c38a93dacc06196

  • SHA1

    c7928373754103a6aecc6db7d66885f780940d47

  • SHA256

    af81f0168995870867c314cdd601213fb4b8d669e98b981e40f662e2ab9b0145

  • SHA512

    be31fb494338cc5dfd90b7b99c31da585e20e73bccd8fa4dc154e237b44b914223d045587b186bbc6a6ce57deeae70f781c51bb92dd06953cb61b8075d3ab514

  • SSDEEP

    3072:RqyJhVQ9jyBCSxcOV0ZFqqb1pv3ZPoI/JdCgl+Kx/7BEJQZoomnnNtZ4:Xs+BcOV0rqqhR3VoI/fCgbx7BEJQ0

Score
8/10
persistence

Malware Config

Targets

    • Target

      af81f0168995870867c314cdd601213fb4b8d669e98b981e40f662e2ab9b0145

    • Size

      200KB

    • MD5

      1a6958de8fae26b22c38a93dacc06196

    • SHA1

      c7928373754103a6aecc6db7d66885f780940d47

    • SHA256

      af81f0168995870867c314cdd601213fb4b8d669e98b981e40f662e2ab9b0145

    • SHA512

      be31fb494338cc5dfd90b7b99c31da585e20e73bccd8fa4dc154e237b44b914223d045587b186bbc6a6ce57deeae70f781c51bb92dd06953cb61b8075d3ab514

    • SSDEEP

      3072:RqyJhVQ9jyBCSxcOV0ZFqqb1pv3ZPoI/JdCgl+Kx/7BEJQZoomnnNtZ4:Xs+BcOV0rqqhR3VoI/fCgbx7BEJQ0

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks