Overview

overview

7

Static

static

online_tra...28.exe

windows7-x64

7

online_tra...28.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9655b93608e1063b3769cb67733dcb66a8997cb50980a927d3cdb7cbccb6e9d

  • Size

    126KB

  • Sample

    221124-eybkgagg53

  • MD5

    26e8bfe51211b735b807ce9d014202dd

  • SHA1

    a745a31f265388ceee050ca57474cd0395ffdace

  • SHA256

    e9655b93608e1063b3769cb67733dcb66a8997cb50980a927d3cdb7cbccb6e9d

  • SHA512

    cfac47b0885bcbce36effb0e00e428d041b9efcdb0e13c4ffd67734d7f71d4be06537bd9d731705c2f210ed2fb0ea53946c0b513cb7e22ff4a3124a55388403c

  • SSDEEP

    3072:L3FJ821ZZR7TwOCMiECI115hswWey5ZU6GEAE+YBqid4i:LVJ8GZR7TwOCMiECI3pT2jhC/0

Score
7/10
persistence

Malware Config

Targets

    • Target

      online_transaktions_11_2014_0939380001_12987384_93_39_003_365_9388347_00111_02000028.exe

    • Size

      168KB

    • MD5

      bbf602cc98f05af58228dfc975622b04

    • SHA1

      70fb72c5217aed3c52349a3a92fda087297203b5

    • SHA256

      64dbe523c9ff1558fedaba3d2fc6476893cb2286703e69bcb30eb3015f5bd82a

    • SHA512

      bc1e3819532e0cbcc7377c5e64cb100ef211a9e6b502f0d36a14ec0b80d2378e28d3263d64071448901a8096e904a7e845124a5d7ecc2c670459f1d6e783cfcd

    • SSDEEP

      3072:lfmAD4c6xEGUAV31hECI115hswWe25ZU6GEAE+YBTVdX7lqEd+zr3/1C:lfYc6EGUYhECI3pTqjhC0fUlM

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks