Overview

overview

7

Static

static

rechnung_v...02.exe

windows7-x64

7

rechnung_v...02.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    7970571d2325a8e59e85c615aecf2749e3c6b290010bc82fbfe387ae4db5fa83

  • Size

    135KB

  • Sample

    221124-e1jc4agh94

  • MD5

    596a4837f8b9ae1e2de186ad8c7d2b94

  • SHA1

    8be28fdaa9c1fc346e1fe293ac494a277f7ff44a

  • SHA256

    7970571d2325a8e59e85c615aecf2749e3c6b290010bc82fbfe387ae4db5fa83

  • SHA512

    44f5beed5d075945c7b8a8b60fe7efd539115dbcd8b5d9243969d21d03f3b31a2eee71426d38531492717072b5357088c7cd154fee6df1a009228ce7ad6bc51e

  • SSDEEP

    3072:2LGJ4uuh6mqr3AQf/Kf2DWJEi/i8D2D7oyCT8nVn1QETaT2rewhp85QN8+H:2a4zhaP/E2DH8yDTV1MT2re6p85QN3H

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnung_vodafone_team_0000399387201_0020398478002_0003_77352_192_0200002.exe

    • Size

      196KB

    • MD5

      03c97952e19ce93941404ef9a3a935f5

    • SHA1

      ec7edb6a0b5f14c7017ba645e269c8598633e384

    • SHA256

      e01e77a43a43d919359d7716fc19c6286eaadf08cbec4442741789bd680594a0

    • SHA512

      713b638f2f4f0870798ae66e14a81de302612b8aec3dc4cb1ce169b6df9be3aa89746dae4b31b0cd98ada46bd0fda3e42c8b4992c04ef6635bd112a137339f7f

    • SSDEEP

      3072:9udusODvGZVHhX1drkr3k1qusMrf/Kf2DWJEi/i0D2D7oyCT8nVn1QJsYvVnGd+z:59+phXzpsML/E2DH0yDTV13Y5z

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks