Overview

overview

7

Static

static

volksbank_...02.exe

windows7-x64

7

volksbank_...02.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e8a3ef1c9366a7a0ba1138557b3c39eaeac552c06bf55d0724a02e36467838c5

  • Size

    120KB

  • Sample

    221124-ffjzkaab75

  • MD5

    fec91d4a5c758f536fde16e1982aa438

  • SHA1

    0bbd5c7e9367d74a868405544345e25d178c904b

  • SHA256

    e8a3ef1c9366a7a0ba1138557b3c39eaeac552c06bf55d0724a02e36467838c5

  • SHA512

    2f92d36c917f691d885526ce2d13bc46a8b4bbf60c7b5bf80dce1c14349d249287a5992934991df16369dfac71b3ce3d4049cc564dc3b028ac70f83af752b6ed

  • SSDEEP

    3072:R03rHcScFVvUB2rmy4uEZ08nc5UrUJLiWJKJf5CmJ2e:RGzohe2rmy4uEjnZUJmt8ne

Score
7/10
persistence

Malware Config

Targets

    • Target

      volksbank_de_transaktions_id_000023928001_2014_11_0000390382755_00003997550002.exe

    • Size

      148KB

    • MD5

      85361cc6dd212579eb0c5974a7ab0faf

    • SHA1

      8a9d5e8cd1f75b48b4113955b55849bc10a9eb14

    • SHA256

      b673c683d1ae36a0c6401adda9d23e05468fe2a5067ad4d785b39c0aed4f125e

    • SHA512

      593af436b85f2a2540b143c79a93211e499bec7de583cbdfa46fd5f432fa52c1f0ed99dc18e6eb654622bedeb1a0b3decb77b3ad09f46bc9c687117dec0dae3a

    • SSDEEP

      1536:+fr+0Z9MV6eBqDDo2d7M6RO5UrU5mOLiWJ1L6RtJvfyGYkk/8H8LnSH0yxWuf:VYLeS08nc5UrUPLiWJKJf548HkSUyMuf

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks