Overview

overview

8

Static

static

e3aef0f0fa...bd.exe

windows7-x64

8

e3aef0f0fa...bd.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3aef0f0fa53bcd17829119dd122372d50ffdd47a7982aadc6f0260418c767bd

  • Size

    300KB

  • Sample

    221123-p31p9sfh9t

  • MD5

    cd54cb1f4864bce38f8d0119c24b2222

  • SHA1

    e67b482d112804fc244d2ec34b235c577d9d7d79

  • SHA256

    e3aef0f0fa53bcd17829119dd122372d50ffdd47a7982aadc6f0260418c767bd

  • SHA512

    73409373004ed8b0c6db1e519b3e2b34883f80bc628121db56e96a4a504d5f4336406e7d3bee53c6a4c7380fe27f390c23884254448cb376479ae81c9ec2b0e9

  • SSDEEP

    6144:D6XgdcbBWNIgx+l4Am5Q7kHdZisdYS8Byw9zqzeHruHXaRr7Z+uZA4MAyWX:+QdcbBRgIlM50kHdZiIzw9zoeHruHXaW

Score
8/10
persistence

Malware Config

Targets

    • Target

      e3aef0f0fa53bcd17829119dd122372d50ffdd47a7982aadc6f0260418c767bd

    • Size

      300KB

    • MD5

      cd54cb1f4864bce38f8d0119c24b2222

    • SHA1

      e67b482d112804fc244d2ec34b235c577d9d7d79

    • SHA256

      e3aef0f0fa53bcd17829119dd122372d50ffdd47a7982aadc6f0260418c767bd

    • SHA512

      73409373004ed8b0c6db1e519b3e2b34883f80bc628121db56e96a4a504d5f4336406e7d3bee53c6a4c7380fe27f390c23884254448cb376479ae81c9ec2b0e9

    • SSDEEP

      6144:D6XgdcbBWNIgx+l4Am5Q7kHdZisdYS8Byw9zqzeHruHXaRr7Z+uZA4MAyWX:+QdcbBRgIlM50kHdZiIzw9zoeHruHXaW

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks