Overview

overview

6

Static

static

48e7305133...49.exe

windows7-x64

6

48e7305133...49.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48e73051331e03166327ec421bf7887ef6065e1953ddada28df86fdd7fab6149

  • Size

    94KB

  • Sample

    221123-rrbywahc82

  • MD5

    d0e4a4311ca6c0d4c1bd2c6ccda096f2

  • SHA1

    40fc65d6589b78cd1c1cd549e78081ffe6f007cb

  • SHA256

    48e73051331e03166327ec421bf7887ef6065e1953ddada28df86fdd7fab6149

  • SHA512

    814f0f621b5113483cee8f2997a78733a74340ac5b7b6f16563dce3d3fd5499146a08e29d0a6be0322d8544a8e4baed70972c4dc2cf242eaa38706bcefb2df71

  • SSDEEP

    1536:/K9dFTrjVmWLQtkdN6ybD6+1FyD7uc7H+MeE8+D/Fa0HiVCF8:k/njE+F6ya+1FI7fb7eE8+D9QW8

Score
6/10
persistence

Malware Config

Targets

    • Target

      48e73051331e03166327ec421bf7887ef6065e1953ddada28df86fdd7fab6149

    • Size

      94KB

    • MD5

      d0e4a4311ca6c0d4c1bd2c6ccda096f2

    • SHA1

      40fc65d6589b78cd1c1cd549e78081ffe6f007cb

    • SHA256

      48e73051331e03166327ec421bf7887ef6065e1953ddada28df86fdd7fab6149

    • SHA512

      814f0f621b5113483cee8f2997a78733a74340ac5b7b6f16563dce3d3fd5499146a08e29d0a6be0322d8544a8e4baed70972c4dc2cf242eaa38706bcefb2df71

    • SSDEEP

      1536:/K9dFTrjVmWLQtkdN6ybD6+1FyD7uc7H+MeE8+D/Fa0HiVCF8:k/njE+F6ya+1FI7fb7eE8+D9QW8

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks