Overview

overview

10

Static

static

d8f47458cb...4c.exe

windows7-x64

10

d8f47458cb...4c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8f47458cba7cb7fea21512423f7a9a142d55e8c4a6f962b3a0af6b042d0a84c

  • Size

    38KB

  • Sample

    221123-tdj4fagg8w

  • MD5

    ab7855994b1be6afed7d2edac03d4c68

  • SHA1

    58dba0d095630e426ee25b3e31835756205c9a49

  • SHA256

    d8f47458cba7cb7fea21512423f7a9a142d55e8c4a6f962b3a0af6b042d0a84c

  • SHA512

    2f14203fe4e3f2acb028aa74ddbe3b233c4a55e0c48dd04a4f8480410c0d16e5b1792cac60a5f5b74407fa02a6a182e1ecfc5131482134484d4e0221f6702206

  • SSDEEP

    768:uvnPZvxfxj8KzKgYqhCPIHQN4bNfrfQKpMFYf3Y:u3HZAKzhrhCPIwN+zfQwZfI

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d8f47458cba7cb7fea21512423f7a9a142d55e8c4a6f962b3a0af6b042d0a84c

    • Size

      38KB

    • MD5

      ab7855994b1be6afed7d2edac03d4c68

    • SHA1

      58dba0d095630e426ee25b3e31835756205c9a49

    • SHA256

      d8f47458cba7cb7fea21512423f7a9a142d55e8c4a6f962b3a0af6b042d0a84c

    • SHA512

      2f14203fe4e3f2acb028aa74ddbe3b233c4a55e0c48dd04a4f8480410c0d16e5b1792cac60a5f5b74407fa02a6a182e1ecfc5131482134484d4e0221f6702206

    • SSDEEP

      768:uvnPZvxfxj8KzKgYqhCPIHQN4bNfrfQKpMFYf3Y:u3HZAKzhrhCPIwN+zfQwZfI

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks