Overview

overview

8

Static

static

CF߱Ѫ�...se.exe

windows7-x64

8

CF߱Ѫ�...se.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c61eb03a7250c27d1a4dc89e280d22d0b8051c95a0ba41b126055fbbedab9430

  • Size

    2.6MB

  • Sample

    221123-tedm2sgh5z

  • MD5

    baabf9a2554dc78568078151b7659b50

  • SHA1

    11cc35d393ec18987f77d1e393c9da9fea8bee97

  • SHA256

    c61eb03a7250c27d1a4dc89e280d22d0b8051c95a0ba41b126055fbbedab9430

  • SHA512

    0d4b9737a3f4cfa15a9520ad52285fcfa7ab65c5644e6f58b8235e3cc7e02ea5aef40129213f5f551fd80b9d665a8f7b2e4b95a34d6fad1ab87545de86b12fae

  • SSDEEP

    49152:57FFq7CVpAImh70U5gvoGe7uMqmOZHG+MiN5Aw4a7B4ULDzom1z/hKu:/IOp60UaQB7hI5G+MiN5A9mB4Izom1zp

Score
8/10
persistence

Malware Config

Targets

    • Target

      CF߱ѪٷȫܸSP566_se.exe

    • Size

      2.7MB

    • MD5

      5ecfaebbe0d10a4ba347e6e6142f8a27

    • SHA1

      8293651b16bbee12429eddb4e2a696d111833d55

    • SHA256

      57ef54f6352247008e3d56fe74d547f986ee1d13840099f2a11ffe00ca535e4c

    • SHA512

      39a3425c2ab67266fa4f9c5ddf81ad1b3662b6973d827f857525b30a06a6e427e05fd88a768ed2c3f1c02a54e1d48ba92774de32baeff1d1298a6eb565d52317

    • SSDEEP

      49152:hiFVFu7OVJ2+gjPMA/wNo2eVaA6GOhFMMMIBvx/Q8WRbWgHgizQBv7gOm07zlp4S:h4wqJWMAIKxVbynMMMIBvx/9kbWgAv7f

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks