Overview

overview

8

Static

static

tmp.exe

windows7-x64

8

tmp.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    405KB

  • Sample

    221123-q28vxsae61

  • MD5

    0e27480e43e0585cfae5e08a966dc9c8

  • SHA1

    a59d1be2fbf89a529745725933ca6e1f41d9b4ac

  • SHA256

    ac65f03a3be26aa47f5338570fe338e3d0a89a15d74d12089466540975f5654d

  • SHA512

    2cd5e128af8ab578178899973c79853fbc072e83880932cd26f9824cd3655bc2ea24400d78fc80ed5f9d7ff74aca7af47c1c186814f924b330c326fc43bd4728

  • SSDEEP

    6144:RWWmZUA+FX/TQB7Ysv5AvfITQocgDh+gDRUxBO:8WxA+FyvZug6T

Score
8/10
persistence

Malware Config

Targets

    • Target

      tmp

    • Size

      405KB

    • MD5

      0e27480e43e0585cfae5e08a966dc9c8

    • SHA1

      a59d1be2fbf89a529745725933ca6e1f41d9b4ac

    • SHA256

      ac65f03a3be26aa47f5338570fe338e3d0a89a15d74d12089466540975f5654d

    • SHA512

      2cd5e128af8ab578178899973c79853fbc072e83880932cd26f9824cd3655bc2ea24400d78fc80ed5f9d7ff74aca7af47c1c186814f924b330c326fc43bd4728

    • SSDEEP

      6144:RWWmZUA+FX/TQB7Ysv5AvfITQocgDh+gDRUxBO:8WxA+FyvZug6T

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks