Overview

overview

10

Static

static

eae2c716b4...d3.exe

windows7-x64

10

eae2c716b4...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eae2c716b4465a9381e901341d40ecea7d4c98062f1813aa1ab1b0059b8bdad3

  • Size

    431KB

  • Sample

    221123-sm4c1abg43

  • MD5

    a492a9f0449242fe1d5ce80f52113e9b

  • SHA1

    0ffca6b08e8b0a31a91d2a9ee03a0739930e83ef

  • SHA256

    eae2c716b4465a9381e901341d40ecea7d4c98062f1813aa1ab1b0059b8bdad3

  • SHA512

    c42ce0e3a6a0d2895218faede2c20978294fc1fec6c99e5c1c1746c2af73094bc8364e95c399d12260d2179ecf376fa745d463c7194db3db9c4fb3aae73b70a4

  • SSDEEP

    6144:4OhyBFm+OjLa7tsc3FTL6Q+yjGcrWWZ1bvwGm8eecRap8T/dLMY82o:mJYIJxqyjGcrHZdwGm3RaAKft

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eae2c716b4465a9381e901341d40ecea7d4c98062f1813aa1ab1b0059b8bdad3

    • Size

      431KB

    • MD5

      a492a9f0449242fe1d5ce80f52113e9b

    • SHA1

      0ffca6b08e8b0a31a91d2a9ee03a0739930e83ef

    • SHA256

      eae2c716b4465a9381e901341d40ecea7d4c98062f1813aa1ab1b0059b8bdad3

    • SHA512

      c42ce0e3a6a0d2895218faede2c20978294fc1fec6c99e5c1c1746c2af73094bc8364e95c399d12260d2179ecf376fa745d463c7194db3db9c4fb3aae73b70a4

    • SSDEEP

      6144:4OhyBFm+OjLa7tsc3FTL6Q+yjGcrWWZ1bvwGm8eecRap8T/dLMY82o:mJYIJxqyjGcrHZdwGm3RaAKft

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks