Overview

overview

8

Static

static

a31e47d5ee...1b.exe

windows7-x64

8

a31e47d5ee...1b.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a31e47d5eedd4be532a7c997140bfc1993566968999bdab58fb107c732b5521b

  • Size

    444KB

  • Sample

    221123-qry8qsef83

  • MD5

    f1d2e8cb7dc35336bec4d2eeb79be76d

  • SHA1

    241827d3e83f68221f32598bcc35aadeb75fe0ac

  • SHA256

    a31e47d5eedd4be532a7c997140bfc1993566968999bdab58fb107c732b5521b

  • SHA512

    f508a1038e06fbef84ca37558518720656c30a542cd2e2f462989eedd2570ad8de1c1b01d57d553591dd2036b0bae11e890be0de1b5385d51670589e9740294c

  • SSDEEP

    12288:MveOTQjVEOrxRoH4X6ET9jjjIPAy/BU/3w:Mc7gnIysg

Score
8/10
persistence

Malware Config

Targets

    • Target

      a31e47d5eedd4be532a7c997140bfc1993566968999bdab58fb107c732b5521b

    • Size

      444KB

    • MD5

      f1d2e8cb7dc35336bec4d2eeb79be76d

    • SHA1

      241827d3e83f68221f32598bcc35aadeb75fe0ac

    • SHA256

      a31e47d5eedd4be532a7c997140bfc1993566968999bdab58fb107c732b5521b

    • SHA512

      f508a1038e06fbef84ca37558518720656c30a542cd2e2f462989eedd2570ad8de1c1b01d57d553591dd2036b0bae11e890be0de1b5385d51670589e9740294c

    • SSDEEP

      12288:MveOTQjVEOrxRoH4X6ET9jjjIPAy/BU/3w:Mc7gnIysg

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks