Overview

overview

8

Static

static

b2808470a5...d1.exe

windows7-x64

8

b2808470a5...d1.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2808470a527e4ea38fc8b1f27b3215666f174a263a103bc9e95624380b09cd1

  • Size

    330KB

  • Sample

    221123-qljk4aec49

  • MD5

    c74ce3c717eb54abb4281448a86093ba

  • SHA1

    0b8ce40d3a4fe0e4511bd007d8fb94cfcbd19f32

  • SHA256

    b2808470a527e4ea38fc8b1f27b3215666f174a263a103bc9e95624380b09cd1

  • SHA512

    dce195daf9aaaa4f236fb002c5ce33bbead0570d78fa2e41cf54328f93fce5a7ca8fcd28b12ec22d847b4348c15cdb695dccd3500c845325510c8f3dff6ad595

  • SSDEEP

    6144:GNut5Y66DJQLNE6AEYQmgoUVnDDaTZ/Bc1cYROZ+76:DcDJQxE61pDfVnvCZ/Bc1co6+W

Score
8/10
persistence

Malware Config

Targets

    • Target

      b2808470a527e4ea38fc8b1f27b3215666f174a263a103bc9e95624380b09cd1

    • Size

      330KB

    • MD5

      c74ce3c717eb54abb4281448a86093ba

    • SHA1

      0b8ce40d3a4fe0e4511bd007d8fb94cfcbd19f32

    • SHA256

      b2808470a527e4ea38fc8b1f27b3215666f174a263a103bc9e95624380b09cd1

    • SHA512

      dce195daf9aaaa4f236fb002c5ce33bbead0570d78fa2e41cf54328f93fce5a7ca8fcd28b12ec22d847b4348c15cdb695dccd3500c845325510c8f3dff6ad595

    • SSDEEP

      6144:GNut5Y66DJQLNE6AEYQmgoUVnDDaTZ/Bc1cYROZ+76:DcDJQxE61pDfVnvCZ/Bc1co6+W

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks