Overview

overview

8

Static

static

93f8a14657...0d.exe

windows7-x64

8

93f8a14657...0d.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    93f8a146571dbe06d8b4c6df10a2637f3f0a4c408af5aa3574198174c9a9f10d

  • Size

    138KB

  • Sample

    221124-frybbsea9t

  • MD5

    da4f2c514e0d3bafb432c9e6a9ae13ed

  • SHA1

    e43102428eb63d6d4995792a442dece79990b66b

  • SHA256

    93f8a146571dbe06d8b4c6df10a2637f3f0a4c408af5aa3574198174c9a9f10d

  • SHA512

    658edf16d9121e9a4c34986b16e858e865e552ec67daf7386d9808b0165e1260485f7165416fa3f76227c674984807a0e15208fbad3c38b5069d45d199920a7a

  • SSDEEP

    3072:KTg+x50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1o2Yo3wQGr:KTLoGtmiYlW4A1QvGXjBonnQGr

Score
8/10
persistence

Malware Config

Targets

    • Target

      93f8a146571dbe06d8b4c6df10a2637f3f0a4c408af5aa3574198174c9a9f10d

    • Size

      138KB

    • MD5

      da4f2c514e0d3bafb432c9e6a9ae13ed

    • SHA1

      e43102428eb63d6d4995792a442dece79990b66b

    • SHA256

      93f8a146571dbe06d8b4c6df10a2637f3f0a4c408af5aa3574198174c9a9f10d

    • SHA512

      658edf16d9121e9a4c34986b16e858e865e552ec67daf7386d9808b0165e1260485f7165416fa3f76227c674984807a0e15208fbad3c38b5069d45d199920a7a

    • SSDEEP

      3072:KTg+x50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1o2Yo3wQGr:KTLoGtmiYlW4A1QvGXjBonnQGr

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks