Overview

overview

8

Static

static

5988ca6923...c3.exe

windows7-x64

1

5988ca6923...c3.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3

  • Size

    136KB

  • Sample

    221123-vnszrscd91

  • MD5

    6314acf481191f819a0ebd01d305a1f7

  • SHA1

    42c54a11eec742d8775a4e31c230a2e0842f23cc

  • SHA256

    5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3

  • SHA512

    beb509d721f0f987d236f9bb87fb95ae9470c93a6ce6efd9ec03213b6d9267eacafec8d364701c1391f37868222a1bda59c880217ac455bfeb1aa602f7fc634d

  • SSDEEP

    3072:mVSMX2hidyId0xJGZDtZiab4NlKy/0g5Ktcu:mlXGidyIKfGZDtZR4NlD5Ktcu

Score
8/10
persistence

Malware Config

Targets

    • Target

      5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3

    • Size

      136KB

    • MD5

      6314acf481191f819a0ebd01d305a1f7

    • SHA1

      42c54a11eec742d8775a4e31c230a2e0842f23cc

    • SHA256

      5988ca6923d4668970411878931bc3dd09fadbdcb267533108bcc3869b33e5c3

    • SHA512

      beb509d721f0f987d236f9bb87fb95ae9470c93a6ce6efd9ec03213b6d9267eacafec8d364701c1391f37868222a1bda59c880217ac455bfeb1aa602f7fc634d

    • SSDEEP

      3072:mVSMX2hidyId0xJGZDtZiab4NlKy/0g5Ktcu:mlXGidyIKfGZDtZR4NlD5Ktcu

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks