Overview

overview

7

Static

static

E-Card_zu_...10.exe

windows7-x64

7

E-Card_zu_...10.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2162a830dbf4b553979fc09e662201d2218d3d860380cb7edb84e14fbd49359

  • Size

    141KB

  • Sample

    221124-ekz1xafh33

  • MD5

    696fe653a8373403e454e96c9dfec8fb

  • SHA1

    9388784e5d635f6d6f474a11b1248426fa4f0198

  • SHA256

    c2162a830dbf4b553979fc09e662201d2218d3d860380cb7edb84e14fbd49359

  • SHA512

    5974763d7fca6f240bb9271a45933751d0ed710decb2a98299f968b52cb6fe69d794e634d0d6a9cd70a5fcf4027db0286202f493ac57a71243d5d5175aa99a3a

  • SSDEEP

    3072:CbAA3GZtUhxjGNC53yWMI++U4U9sd/ht+EEVnXWA3TZAy7XwK:CbAqG3UTjfyU++VtthWjmyf

Score
7/10
persistence

Malware Config

Targets

    • Target

      E-Card_zu_Weichnachten_scan_foto_2834792347_12_2014_21093812_000129_001_004_002910.exe

    • Size

      204KB

    • MD5

      0fe1a6e23bb2accf9f57ba54b6002a2a

    • SHA1

      e6b336b3e3b1d9043260b46bf5858a78ae114fd6

    • SHA256

      58b48dc4fcff7d684c0a718a4475dc0b4b5ececa90b3d1e1092fccaf11399eb9

    • SHA512

      c5ccc5c4eb739440a1a439a08e3725c0646e3653410b16b6c548b99c3fa3c8bb8fb074d180a158dddfc89ec102a373ed12f347446d2e401bc021beebb013850d

    • SSDEEP

      3072:91FYqL5nh457wGZtUhxtGNC53yWMI++4V51iwhdlmBs1Z+cdn0t8+4I+VM:xYMw7wG3UTtfyU++Y51RldCh8+V+e

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks