Overview

overview

8

Static

static

f2a056db62...dc.exe

windows7-x64

8

f2a056db62...dc.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2a056db6259ebd853ed4fd83466feb54659f07a76bfaf02201357ae252c11dc

  • Size

    254KB

  • Sample

    221123-pyay2sce54

  • MD5

    134e5e2107b7a64b9d098bedfe64eb40

  • SHA1

    5301b808503aa80dc5cdffe778f648110d6a18ad

  • SHA256

    f2a056db6259ebd853ed4fd83466feb54659f07a76bfaf02201357ae252c11dc

  • SHA512

    b0be44dc201dc2a10204538109b5feac05cd0af35d53fee3fb91504c9efa4c206489f7004a357a9808e84e0d046547a9bbe5c10889eb7bc5ca6834ed184730c7

  • SSDEEP

    3072:BddKhdgcyetZPShTIzdD32PoNnvPyCXjH4H471I3N0KgCEV5RUsBIJ4CcauqyFJQ:BdCtBKMdiwNnvPyFL3THeQ

Score
8/10
persistence

Malware Config

Targets

    • Target

      f2a056db6259ebd853ed4fd83466feb54659f07a76bfaf02201357ae252c11dc

    • Size

      254KB

    • MD5

      134e5e2107b7a64b9d098bedfe64eb40

    • SHA1

      5301b808503aa80dc5cdffe778f648110d6a18ad

    • SHA256

      f2a056db6259ebd853ed4fd83466feb54659f07a76bfaf02201357ae252c11dc

    • SHA512

      b0be44dc201dc2a10204538109b5feac05cd0af35d53fee3fb91504c9efa4c206489f7004a357a9808e84e0d046547a9bbe5c10889eb7bc5ca6834ed184730c7

    • SSDEEP

      3072:BddKhdgcyetZPShTIzdD32PoNnvPyCXjH4H471I3N0KgCEV5RUsBIJ4CcauqyFJQ:BdCtBKMdiwNnvPyFL3THeQ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks