Overview

overview

8

Static

static

8e63d2132a...6f.exe

windows7-x64

8

8e63d2132a...6f.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e63d2132a48ad8c1ed9300d922b4ba41f45a542030dab78f332942b3490ce6f

  • Size

    138KB

  • Sample

    221123-lrerwaca87

  • MD5

    9b09ed30a99f63b39ec9708e42ba0480

  • SHA1

    26237c48e83bb99d7406a6e6c15e72b94575a2e7

  • SHA256

    8e63d2132a48ad8c1ed9300d922b4ba41f45a542030dab78f332942b3490ce6f

  • SHA512

    696655909c45e57f1aa6897bb028415fc16eb22b38153398e5009be9e6e49778abb76fb100b24b0a999fb69ac21f7c637913e4faaa7a583021bd74647558b1f5

  • SSDEEP

    3072:qzr1LZQEduEgsW2UPqxUEXqkC0i50/YXiQXT+t/8XIgfUTaXD3kz1QNI:qzr1L+QHhUPqxUEVQiQwkXhfUThQi

Score
8/10
persistence

Malware Config

Targets

    • Target

      8e63d2132a48ad8c1ed9300d922b4ba41f45a542030dab78f332942b3490ce6f

    • Size

      138KB

    • MD5

      9b09ed30a99f63b39ec9708e42ba0480

    • SHA1

      26237c48e83bb99d7406a6e6c15e72b94575a2e7

    • SHA256

      8e63d2132a48ad8c1ed9300d922b4ba41f45a542030dab78f332942b3490ce6f

    • SHA512

      696655909c45e57f1aa6897bb028415fc16eb22b38153398e5009be9e6e49778abb76fb100b24b0a999fb69ac21f7c637913e4faaa7a583021bd74647558b1f5

    • SSDEEP

      3072:qzr1LZQEduEgsW2UPqxUEXqkC0i50/YXiQXT+t/8XIgfUTaXD3kz1QNI:qzr1L+QHhUPqxUEVQiQwkXhfUThQi

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks