Overview

overview

8

Static

static

630c886c75...d5.exe

windows7-x64

8

630c886c75...d5.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    630c886c75f4f3507c3d786b42d042900f82cf3bb5c9137aff32cbd0657740d5

  • Size

    228KB

  • Sample

    221124-e2pw9scc3x

  • MD5

    39ae8017537cd6b2a2be5de1da59b838

  • SHA1

    1453686f021b58daf86257b5e321e174fed0682f

  • SHA256

    630c886c75f4f3507c3d786b42d042900f82cf3bb5c9137aff32cbd0657740d5

  • SHA512

    08996813d63c7a5782793e7dfafbb589c9ec492a2dc6c606472050da995d793be136bc0e24e1a8760d9091a07fd168ec28509fb8cf038a4742a2263157e81092

  • SSDEEP

    3072:TlwPtV5FKCjZ5fLyRal/79WMiNzaLp63UVlcrb:ed0ClsUhLiNz0Ck

Score
8/10
persistence

Malware Config

Targets

    • Target

      630c886c75f4f3507c3d786b42d042900f82cf3bb5c9137aff32cbd0657740d5

    • Size

      228KB

    • MD5

      39ae8017537cd6b2a2be5de1da59b838

    • SHA1

      1453686f021b58daf86257b5e321e174fed0682f

    • SHA256

      630c886c75f4f3507c3d786b42d042900f82cf3bb5c9137aff32cbd0657740d5

    • SHA512

      08996813d63c7a5782793e7dfafbb589c9ec492a2dc6c606472050da995d793be136bc0e24e1a8760d9091a07fd168ec28509fb8cf038a4742a2263157e81092

    • SSDEEP

      3072:TlwPtV5FKCjZ5fLyRal/79WMiNzaLp63UVlcrb:ed0ClsUhLiNz0Ck

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks