Overview

overview

7

Static

static

rechnung_n...89.exe

windows7-x64

7

rechnung_n...89.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    351fa45793110686ac90dd13a344aa12f073dc51cb5a46e40f09069e7b503871

  • Size

    135KB

  • Sample

    221124-e1kk6agh95

  • MD5

    1182ba33d76b1de1fd0687800cb072cc

  • SHA1

    4abec48c1b0bdf3b0f32c7d1d2c5f3950c17521a

  • SHA256

    351fa45793110686ac90dd13a344aa12f073dc51cb5a46e40f09069e7b503871

  • SHA512

    d5a2612bd9d9b3371782a20638bcc168579d65af91ee61b7dc1d6de74f3802f0def5bf72f32b6460019c39a13242fb576fa1c2a8fddd3f0af7c260b95f095e0d

  • SSDEEP

    3072:HlLGJ4uuh6mqr3AQf/Kf2DWJEi/i8D2D7oyCT8nVn1QETaT2rewhp85QN8+k9:Hla4zhaP/E2DH8yDTV1MT2re6p85QN3i

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnung_november_2014_0003900028_2014_11_0029302375471_03_444_0039938289.exe

    • Size

      196KB

    • MD5

      03c97952e19ce93941404ef9a3a935f5

    • SHA1

      ec7edb6a0b5f14c7017ba645e269c8598633e384

    • SHA256

      e01e77a43a43d919359d7716fc19c6286eaadf08cbec4442741789bd680594a0

    • SHA512

      713b638f2f4f0870798ae66e14a81de302612b8aec3dc4cb1ce169b6df9be3aa89746dae4b31b0cd98ada46bd0fda3e42c8b4992c04ef6635bd112a137339f7f

    • SSDEEP

      3072:9udusODvGZVHhX1drkr3k1qusMrf/Kf2DWJEi/i0D2D7oyCT8nVn1QJsYvVnGd+z:59+phXzpsML/E2DH0yDTV13Y5z

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks