Overview

overview

7

Static

static

rechnung_n...89.exe

windows7-x64

7

rechnung_n...89.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d98e823e6347b39f60297599022f1a6656955b88735da09b9ff385a77ba3afe1

  • Size

    126KB

  • Sample

    221124-eydptsca4w

  • MD5

    cce580529d563835562c66705d80bdb4

  • SHA1

    1662cbf65e5944dbe7b10c1557f2ff41f4a4c855

  • SHA256

    d98e823e6347b39f60297599022f1a6656955b88735da09b9ff385a77ba3afe1

  • SHA512

    965dc0caa60500b213dd466171e94fc2061d6e2208510bce75b40e94ac7a796c930a4975efb645c7990d6779a5e309aef834a306d8e8c9f42884eae34cb1e5bb

  • SSDEEP

    3072:ZW3FJ821ZZR7TwOCMiECI115hswWey5ZU6GEAE+YBqid4Iy:ZWVJ8GZR7TwOCMiECI3pT2jhC/yy

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnung_november_2014_0003900028_2014_11_0029302375471_03_444_0039938289.exe

    • Size

      168KB

    • MD5

      bbf602cc98f05af58228dfc975622b04

    • SHA1

      70fb72c5217aed3c52349a3a92fda087297203b5

    • SHA256

      64dbe523c9ff1558fedaba3d2fc6476893cb2286703e69bcb30eb3015f5bd82a

    • SHA512

      bc1e3819532e0cbcc7377c5e64cb100ef211a9e6b502f0d36a14ec0b80d2378e28d3263d64071448901a8096e904a7e845124a5d7ecc2c670459f1d6e783cfcd

    • SSDEEP

      3072:lfmAD4c6xEGUAV31hECI115hswWe25ZU6GEAE+YBTVdX7lqEd+zr3/1C:lfYc6EGUYhECI3pTqjhC0fUlM

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks