Overview

overview

7

Static

static

rechnungon...27.exe

windows7-x64

7

rechnungon...27.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d064da1de78e45ca0c361605fbbfa666cef5418df0039f6833a442dc1b1fece1

  • Size

    130KB

  • Sample

    221124-e1z1vacb8y

  • MD5

    7f7c38e40fc6c08804c997ef8465d0f7

  • SHA1

    02fc2e395474d0aca4144c1c99640c7c73bdeaa7

  • SHA256

    d064da1de78e45ca0c361605fbbfa666cef5418df0039f6833a442dc1b1fece1

  • SHA512

    388be46653d7757f10fa5fc69ad2161419db18a1c160301257c783d84df5c8336ba070d0486024cc4a02d29da0ff89692436bf90d29e8a7091f02f77b2bc677e

  • SSDEEP

    3072:MtYgtwCu+a9MMTb/OTlrjmPl3XymSPTTW6ulFoQea8OOo:yJa9MMf+m9nCTGkK8Po

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnungonline_telekom_000002920019_2014_11_43726700032_de_003938289_027.exe

    • Size

      176KB

    • MD5

      13997ebf7af8d37dda6697ac03f76cc3

    • SHA1

      9be2bcd498406bdfb05f860ad726273c4a7b4f3a

    • SHA256

      11ecf58db103eb2ded5b942f303d48b5d77e336b8edfe335fa7b81264d1f50ef

    • SHA512

      2894ef41ec784fb39ec663ff8ca5fa8c0ebbd875f95f6e2b843c8bca59d63cc7c43f64df43898290cef31c4b32478819f437fcc4656606d0f7cd4721c735ffee

    • SSDEEP

      3072:rGwR1qmB1TQgHtMF5a6I4Ya5Tlrjmvl3XymSPTyAAwoc9+IkMd+zr3/1C:7KLa6I4x3mdnCNAwo42M

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks