Overview

overview

8

Static

static

21f9caeb97...c1.exe

windows7-x64

8

21f9caeb97...c1.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21f9caeb978aa65439c339c645f4fb5817f0805be464c15d4616413cb55391c1

  • Size

    138KB

  • Sample

    221123-lqsmcafd71

  • MD5

    21539511608404165805c3beb332af70

  • SHA1

    09a4ea039cee5463bdffdda432802fee1c2450f9

  • SHA256

    21f9caeb978aa65439c339c645f4fb5817f0805be464c15d4616413cb55391c1

  • SHA512

    dd3e99e1f3f57c9f2c91d29db841dcc8858ae39930d327cb34afead5b6373de58a87a4ea16b5b638b1cf33a0a6aef792a07838ae782008791945c163d90392ff

  • SSDEEP

    3072:KTax50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1j3wQGl:KTaoGtmiYlW4A1QvGXjBsQGl

Score
8/10
persistence

Malware Config

Targets

    • Target

      21f9caeb978aa65439c339c645f4fb5817f0805be464c15d4616413cb55391c1

    • Size

      138KB

    • MD5

      21539511608404165805c3beb332af70

    • SHA1

      09a4ea039cee5463bdffdda432802fee1c2450f9

    • SHA256

      21f9caeb978aa65439c339c645f4fb5817f0805be464c15d4616413cb55391c1

    • SHA512

      dd3e99e1f3f57c9f2c91d29db841dcc8858ae39930d327cb34afead5b6373de58a87a4ea16b5b638b1cf33a0a6aef792a07838ae782008791945c163d90392ff

    • SSDEEP

      3072:KTax50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1j3wQGl:KTaoGtmiYlW4A1QvGXjBsQGl

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks