Overview

overview

7

Static

static

rechnung_1...05.exe

windows7-x64

7

rechnung_1...05.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79317fe5b9530371155015c8e65bad55ea5477f3624f18e9f12f17cdb8511d43

  • Size

    120KB

  • Sample

    221124-ffsayadc8t

  • MD5

    709f3d4772890021183d1c781601b2fe

  • SHA1

    ca0aea7e91db501faca166de03f965195830aaad

  • SHA256

    79317fe5b9530371155015c8e65bad55ea5477f3624f18e9f12f17cdb8511d43

  • SHA512

    4936cfaf166240e01b5ff3780cc594eda467e5a8d782e44d2e394e979530cc659d7208243e5aa26a203f901c2de1c3019452a703f518ab7aff395a1d7c731da3

  • SSDEEP

    3072:X3rHcScFVvUB2rmy4uEZ08nc5UrUJLiWJKJf5CmJ0:Hzohe2rmy4uEjnZUJmt8B

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnung_11_2014_3280000236_telekom_de_002839300002_11_0000352899_000005.exe

    • Size

      148KB

    • MD5

      85361cc6dd212579eb0c5974a7ab0faf

    • SHA1

      8a9d5e8cd1f75b48b4113955b55849bc10a9eb14

    • SHA256

      b673c683d1ae36a0c6401adda9d23e05468fe2a5067ad4d785b39c0aed4f125e

    • SHA512

      593af436b85f2a2540b143c79a93211e499bec7de583cbdfa46fd5f432fa52c1f0ed99dc18e6eb654622bedeb1a0b3decb77b3ad09f46bc9c687117dec0dae3a

    • SSDEEP

      1536:+fr+0Z9MV6eBqDDo2d7M6RO5UrU5mOLiWJ1L6RtJvfyGYkk/8H8LnSH0yxWuf:VYLeS08nc5UrUPLiWJKJf548HkSUyMuf

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks