Overview

overview

8

Static

static

79fb67a88b...e1.exe

windows7-x64

8

79fb67a88b...e1.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79fb67a88b2981880dd38f6f10c60225249648ae2458490ebb7476da31aaace1

  • Size

    360KB

  • Sample

    221124-3fl59afd66

  • MD5

    0902f366269f9d981cf16be9787242d8

  • SHA1

    ab80eb006033635fddca7a602d600daec3920dfd

  • SHA256

    79fb67a88b2981880dd38f6f10c60225249648ae2458490ebb7476da31aaace1

  • SHA512

    770d35dacdc6cd0c93af2fe30e8adf264ab7516f34ab788201ffd1d3d6202c80fac3a198bb0d8978e9f2894a7968ec7e8f59716628754824f091dc53986e1bec

  • SSDEEP

    6144:Hc5oB7E0uwOMRzSns+ZSRs30Xs4XR1KFgQwIqX0ufD:HNBXuwtRuns7sU5r

Score
8/10
persistence

Malware Config

Targets

    • Target

      79fb67a88b2981880dd38f6f10c60225249648ae2458490ebb7476da31aaace1

    • Size

      360KB

    • MD5

      0902f366269f9d981cf16be9787242d8

    • SHA1

      ab80eb006033635fddca7a602d600daec3920dfd

    • SHA256

      79fb67a88b2981880dd38f6f10c60225249648ae2458490ebb7476da31aaace1

    • SHA512

      770d35dacdc6cd0c93af2fe30e8adf264ab7516f34ab788201ffd1d3d6202c80fac3a198bb0d8978e9f2894a7968ec7e8f59716628754824f091dc53986e1bec

    • SSDEEP

      6144:Hc5oB7E0uwOMRzSns+ZSRs30Xs4XR1KFgQwIqX0ufD:HNBXuwtRuns7sU5r

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks