Overview

overview

7

Static

static

199f9f4e43...d5.exe

windows7-x64

7

199f9f4e43...d5.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5

  • Size

    187KB

  • Sample

    221123-r8s9gsdf7v

  • MD5

    ee2f03e7c4220b32241bb5dee795f595

  • SHA1

    c83fc42eb657f8138cdfc2284557288b6296a17f

  • SHA256

    199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5

  • SHA512

    ecf2d2e2a27fba5da839af0644941f5d8d495a98e9d590706690ac7932229c5a78a3d65f4a73f7e5a1713824c96ef3122f5be79c9f6c0e2481753964697b095a

  • SSDEEP

    3072:hv5vSWPt4BY2n1wRrenEgVFpLBMA3GzzUAbi3uGmftVzl2qK/:1szKChEgBLBMA3GnUA2+1zl2j/

Score
7/10

Malware Config

Targets

    • Target

      199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5

    • Size

      187KB

    • MD5

      ee2f03e7c4220b32241bb5dee795f595

    • SHA1

      c83fc42eb657f8138cdfc2284557288b6296a17f

    • SHA256

      199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5

    • SHA512

      ecf2d2e2a27fba5da839af0644941f5d8d495a98e9d590706690ac7932229c5a78a3d65f4a73f7e5a1713824c96ef3122f5be79c9f6c0e2481753964697b095a

    • SSDEEP

      3072:hv5vSWPt4BY2n1wRrenEgVFpLBMA3GzzUAbi3uGmftVzl2qK/:1szKChEgBLBMA3GnUA2+1zl2j/

    Score
    7/10

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks