Overview

overview

7

Static

static

rechnung_v...02.exe

windows7-x64

7

rechnung_v...02.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df5c7233142995fd01554dc00b8177670ac4e4cb9f83d57d2ff04c6c50d1662e

  • Size

    126KB

  • Sample

    221124-eyb61aca31

  • MD5

    dad1805e549c5d0672995b2bed6d4309

  • SHA1

    86cd5c05e396bb1f4d1df2d4eab0416500844107

  • SHA256

    df5c7233142995fd01554dc00b8177670ac4e4cb9f83d57d2ff04c6c50d1662e

  • SHA512

    2ae35ac33671c54513cf6bbe45ba8080f5cbb0e08dfe2113ada21d3b8f65ea6c295f2f26fdd9cbe7eaa95a5728c5b1939ddce0db819a472136d116fb5fdb62cc

  • SSDEEP

    3072:f3FJ821ZZR7TwOCMiECI115hswWey5ZU6GEAE+YBqid4q:fVJ8GZR7TwOCMiECI3pT2jhC/o

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnung_vodafone_team_0000399387201_0020398478002_0003_77352_192_0200002.exe

    • Size

      168KB

    • MD5

      bbf602cc98f05af58228dfc975622b04

    • SHA1

      70fb72c5217aed3c52349a3a92fda087297203b5

    • SHA256

      64dbe523c9ff1558fedaba3d2fc6476893cb2286703e69bcb30eb3015f5bd82a

    • SHA512

      bc1e3819532e0cbcc7377c5e64cb100ef211a9e6b502f0d36a14ec0b80d2378e28d3263d64071448901a8096e904a7e845124a5d7ecc2c670459f1d6e783cfcd

    • SSDEEP

      3072:lfmAD4c6xEGUAV31hECI115hswWe25ZU6GEAE+YBTVdX7lqEd+zr3/1C:lfYc6EGUYhECI3pTqjhC0fUlM

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks