Overview

overview

8

Static

static

b5d4f5babe...0a.exe

windows7-x64

8

b5d4f5babe...0a.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5d4f5babecdf1f4f43e5e0afc42a9a8ae3a9e8311eaaf777914cac3dc6d2f0a

  • Size

    270KB

  • Sample

    221123-m89t1sbc8x

  • MD5

    930b90969de8f7e3169cd2e0b5580c9f

  • SHA1

    463cb10f654705a5a71b6994180e698d711fe99e

  • SHA256

    b5d4f5babecdf1f4f43e5e0afc42a9a8ae3a9e8311eaaf777914cac3dc6d2f0a

  • SHA512

    75a00f1d5a56908a8f4771b899fbc11df4801bad57bd93d687dcce739986a603a91603d9654674d7f2ed1e2ad8f95422206f5e08b3e5c0cda7d366b0b6ec6485

  • SSDEEP

    6144:NtjpJkJqvoArlO+BeiG2/pWTxq/fnx7GDrRcJIcxyCq0hzfvS:rTvo8YVq/PERcHxywvS

Score
8/10
persistence

Malware Config

Targets

    • Target

      b5d4f5babecdf1f4f43e5e0afc42a9a8ae3a9e8311eaaf777914cac3dc6d2f0a

    • Size

      270KB

    • MD5

      930b90969de8f7e3169cd2e0b5580c9f

    • SHA1

      463cb10f654705a5a71b6994180e698d711fe99e

    • SHA256

      b5d4f5babecdf1f4f43e5e0afc42a9a8ae3a9e8311eaaf777914cac3dc6d2f0a

    • SHA512

      75a00f1d5a56908a8f4771b899fbc11df4801bad57bd93d687dcce739986a603a91603d9654674d7f2ed1e2ad8f95422206f5e08b3e5c0cda7d366b0b6ec6485

    • SSDEEP

      6144:NtjpJkJqvoArlO+BeiG2/pWTxq/fnx7GDrRcJIcxyCq0hzfvS:rTvo8YVq/PERcHxywvS

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks