Overview

overview

7

Static

static

rechnung_1...38.exe

windows7-x64

7

rechnung_1...38.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    937ba8c629a5ad48e3a6929fc1203970ddb89499ab160a5f31a1483952f9ee6e

  • Size

    120KB

  • Sample

    221124-ffqgcadc7z

  • MD5

    935f78d01b64ef8db695dc447e74af66

  • SHA1

    eec46833074bed9b68a9f3778c3740abfe736836

  • SHA256

    937ba8c629a5ad48e3a6929fc1203970ddb89499ab160a5f31a1483952f9ee6e

  • SHA512

    06620f31cc775fe3f6f35a3195806a5e691f403ed71b7ac5da95dec69c7e39d0286bc1c1af42b45e1861d0d23847612602d35eb6ba86e570e771f5af2ab53a4f

  • SSDEEP

    3072:A3rHcScFVvUB2rmy4uEZ08nc5UrUJLiWJKJf5CmJN:izohe2rmy4uEjnZUJmt8y

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnung_11_2014_vodafone_team_00200034994_00003999300067_11_0000002738.exe

    • Size

      148KB

    • MD5

      85361cc6dd212579eb0c5974a7ab0faf

    • SHA1

      8a9d5e8cd1f75b48b4113955b55849bc10a9eb14

    • SHA256

      b673c683d1ae36a0c6401adda9d23e05468fe2a5067ad4d785b39c0aed4f125e

    • SHA512

      593af436b85f2a2540b143c79a93211e499bec7de583cbdfa46fd5f432fa52c1f0ed99dc18e6eb654622bedeb1a0b3decb77b3ad09f46bc9c687117dec0dae3a

    • SSDEEP

      1536:+fr+0Z9MV6eBqDDo2d7M6RO5UrU5mOLiWJ1L6RtJvfyGYkk/8H8LnSH0yxWuf:VYLeS08nc5UrUPLiWJKJf548HkSUyMuf

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks