Overview

overview

7

Static

static

Informatio...05.exe

windows7-x64

7

Informatio...05.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8961dba26b6c9c9131d41f317c40606af53c0cbe94836a5789f9ffb2634072eb

  • Size

    123KB

  • Sample

    221124-ematssbb5s

  • MD5

    a90c95f0b728be72fce688aa3a4738bb

  • SHA1

    c6c4c68dd52204b7860bffa84b558e1c03dddfee

  • SHA256

    8961dba26b6c9c9131d41f317c40606af53c0cbe94836a5789f9ffb2634072eb

  • SHA512

    4fea2c30d0bf7ef5c60e1b57ad8b7ab43b060b1fc49f1c8b03d7954d1757185c01f873878c6b303863583a5da903132ff22c85b8f02e725f7224e6b9033d5c6e

  • SSDEEP

    3072:YA1sTUA4TPGQm1dPcmdeXTQ+9uV0/9L/X:YA1hAsGQmgIpA9r

Score
7/10
persistence

Malware Config

Targets

    • Target

      Informationen_Kontobewegung_dezember_2014_de_20_8139_237_90109238_000129_000028_05.exe

    • Size

      156KB

    • MD5

      8e9111802bf368404c2a18222b3eb986

    • SHA1

      6a744fd5cab051d4f115a172e45d7bcb9c14c276

    • SHA256

      2c4ca41292c07252bb043dae7697a91c140ba9be82fac5cd62c9f9c802959e0d

    • SHA512

      67a24d236ccf08b55a0f83338f11022da506ae9c89920162e2e6ab7a79545839f3fe118adaf4d5602ce452f9192e81d380364519beb040767b9d11ed05322832

    • SSDEEP

      3072:N2VpC7emUS2JQM2bPcmdeXTQ+LuV0/9HQZl3a12+sq:kVpC6mUVJ3IpY9x1vh

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks