Overview

overview

8

Static

static

d5ba3f1b81...d5.exe

windows7-x64

8

d5ba3f1b81...d5.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5ba3f1b8150837b19e8fd1982d05919c629f2da97cf5300f5358ef28f4559d5

  • Size

    138KB

  • Sample

    221123-lqp68afd7y

  • MD5

    b230ce98acb17af9f89d681911734c44

  • SHA1

    f5aab843ed1521bf3f0fc9dd6790528371460446

  • SHA256

    d5ba3f1b8150837b19e8fd1982d05919c629f2da97cf5300f5358ef28f4559d5

  • SHA512

    70ef55508a9881bc0979307c4816ff9c217223d4ead7b5e9b9d3d2d84922be0679d6a7e372f571be05eb1a5b771aa9597fca647f825747d6cb7a39f0eab796f9

  • SSDEEP

    3072:KTmx50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1j3wQG5:KTmoGtmiYlW4A1QvGXjBsQG5

Score
8/10
persistence

Malware Config

Targets

    • Target

      d5ba3f1b8150837b19e8fd1982d05919c629f2da97cf5300f5358ef28f4559d5

    • Size

      138KB

    • MD5

      b230ce98acb17af9f89d681911734c44

    • SHA1

      f5aab843ed1521bf3f0fc9dd6790528371460446

    • SHA256

      d5ba3f1b8150837b19e8fd1982d05919c629f2da97cf5300f5358ef28f4559d5

    • SHA512

      70ef55508a9881bc0979307c4816ff9c217223d4ead7b5e9b9d3d2d84922be0679d6a7e372f571be05eb1a5b771aa9597fca647f825747d6cb7a39f0eab796f9

    • SSDEEP

      3072:KTmx50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1j3wQG5:KTmoGtmiYlW4A1QvGXjBsQG5

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks