Overview

overview

7

Static

static

online_tra...28.exe

windows7-x64

7

online_tra...28.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4415163f5b6273b8d05f19b0be1d48f16f8d8287033f94cfa20b3b8da8a237cf

  • Size

    126KB

  • Sample

    221124-ey3zqaca7z

  • MD5

    2257fe5b6d5059a9deedfe961d9943df

  • SHA1

    67d51ae7efe5adb33d28cbf3e9e85fa350e14385

  • SHA256

    4415163f5b6273b8d05f19b0be1d48f16f8d8287033f94cfa20b3b8da8a237cf

  • SHA512

    4bd8d6e9c0a4d001b16d895da060bbf8dfc7573986248285580505345e2c05804cff8f0f45cce13e5b6a16403744e8fbf911911c47296650cfe657fc3d4e5198

  • SSDEEP

    3072:BRUGgqRxKNnpXtAVR6Li2ikZSYbmlpSchjDeb0McnnX:jUG7ANn9Oy7ZS9h2YxnX

Score
7/10
persistence

Malware Config

Targets

    • Target

      online_transaktions_11_2014_0939380001_12987384_93_39_003_365_9388347_00111_02000028.exe

    • Size

      168KB

    • MD5

      91291b0c1fb27cff77c5a7731807abf0

    • SHA1

      0cdd5dcdf23c65136faf067d55a098f1fb93469f

    • SHA256

      ede3136fd45a022bb470ff9a2752d4b48c641e1fe6ddc4aa5fa3a414b6921b95

    • SHA512

      65632a66c7cb3fdbdf0e89de5298b378597e96e8a1a96f232669dd7a70235b428b45f529f6175555ea67ad987dbdfade0697b3ee440bfebf9a473db3279b490a

    • SSDEEP

      3072:pVmADg66x5y7FuW3jLi2ikZSYbmlpSchjDeL8lOW+9d+zr3/1C:pVA665pW3Z7ZS9h2LjOM

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks