Overview

overview

8

Static

static

371b2f5fab...2d.exe

windows7-x64

8

371b2f5fab...2d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    371b2f5fab7e1d885f4456d708c9d55cef9dfb6263c41b98efee60f8f831832d

  • Size

    351KB

  • Sample

    221123-rygspscg5z

  • MD5

    81100c9e1366af7e33f763177d61fd2f

  • SHA1

    852c2864cb8268fb3aad8d03559817ea848fa957

  • SHA256

    371b2f5fab7e1d885f4456d708c9d55cef9dfb6263c41b98efee60f8f831832d

  • SHA512

    0dfc383bdc9bc6df4ab025233ecece90a9291e4252f55dddba49630122d0458efcb4b99ed4d66e09aeaaa0eee6c800a098a1cdcf05f77541739b9dd39357b6aa

  • SSDEEP

    6144:Z3c4cg0RO2MvXOLXkg7zq1HKkrd0qR90IUct+LhftMWbGKy:ZiBTM2LXr7zqJJRbUcIpbGKy

Score
8/10
persistence

Malware Config

Targets

    • Target

      371b2f5fab7e1d885f4456d708c9d55cef9dfb6263c41b98efee60f8f831832d

    • Size

      351KB

    • MD5

      81100c9e1366af7e33f763177d61fd2f

    • SHA1

      852c2864cb8268fb3aad8d03559817ea848fa957

    • SHA256

      371b2f5fab7e1d885f4456d708c9d55cef9dfb6263c41b98efee60f8f831832d

    • SHA512

      0dfc383bdc9bc6df4ab025233ecece90a9291e4252f55dddba49630122d0458efcb4b99ed4d66e09aeaaa0eee6c800a098a1cdcf05f77541739b9dd39357b6aa

    • SSDEEP

      6144:Z3c4cg0RO2MvXOLXkg7zq1HKkrd0qR90IUct+LhftMWbGKy:ZiBTM2LXr7zqJJRbUcIpbGKy

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks