Overview

overview

7

Static

static

E-Card_zu_...10.exe

windows7-x64

7

E-Card_zu_...10.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    247b178e2f04d4f46715f0963e32dd4962f2281c145bdee7bb4d3fb517767e52

  • Size

    141KB

  • Sample

    221124-ek5ldsfh42

  • MD5

    9038baf3b046c13cea2fbacdf449b7b2

  • SHA1

    d2cd9d3e696bc9c7eacd26f845f280e92e44b2bd

  • SHA256

    247b178e2f04d4f46715f0963e32dd4962f2281c145bdee7bb4d3fb517767e52

  • SHA512

    163207100796e7edd8c5c9fd0ea61121fd4024661c22d515f9d097a5d49934b6e75697b4ad2d9ef7b8d709a4d2809c0aab1566d8560259d1ad1caac358d969f5

  • SSDEEP

    3072:YbAA3GZtUhxjGNC53yWMI++U4U9sd/ht+EEVnXWA3TZAy7Xw8:YbAqG3UTjfyU++VtthWjmy1

Score
7/10
persistence

Malware Config

Targets

    • Target

      E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe

    • Size

      204KB

    • MD5

      0fe1a6e23bb2accf9f57ba54b6002a2a

    • SHA1

      e6b336b3e3b1d9043260b46bf5858a78ae114fd6

    • SHA256

      58b48dc4fcff7d684c0a718a4475dc0b4b5ececa90b3d1e1092fccaf11399eb9

    • SHA512

      c5ccc5c4eb739440a1a439a08e3725c0646e3653410b16b6c548b99c3fa3c8bb8fb074d180a158dddfc89ec102a373ed12f347446d2e401bc021beebb013850d

    • SSDEEP

      3072:91FYqL5nh457wGZtUhxtGNC53yWMI++4V51iwhdlmBs1Z+cdn0t8+4I+VM:xYMw7wG3UTtfyU++Y51RldCh8+V+e

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks