Overview

overview

8

Static

static

e145ac4a00...75.exe

windows7-x64

8

e145ac4a00...75.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    e145ac4a00751d7085350631cac819b8add0114b66ce36af7fd0165fdeb4c675

  • Size

    248KB

  • Sample

    221124-jeyywaca51

  • MD5

    4f46417d626d4ce1e4dbf2f0aad05889

  • SHA1

    7f66b52c3418b68f7675d84efac3cc1d5102a27c

  • SHA256

    e145ac4a00751d7085350631cac819b8add0114b66ce36af7fd0165fdeb4c675

  • SHA512

    4e5a2f2d2b52b412c1b5e6e67681417c656c74ab928fbe830e8b04b67af8d314504e4c0fa6b124137283c737bf63c0319e6f284653c19e9c6c7ca4549d02d92f

  • SSDEEP

    3072:q2SAPvEjwY4FQE3hXJnVkmUtzg7ONeATtnJblE9+Uh74Ff7gaIKGr8YjU:q9jwbFQYhBVUVg7WFbl6tYU9ov

Score
8/10
persistence

Malware Config

Targets

    • Target

      e145ac4a00751d7085350631cac819b8add0114b66ce36af7fd0165fdeb4c675

    • Size

      248KB

    • MD5

      4f46417d626d4ce1e4dbf2f0aad05889

    • SHA1

      7f66b52c3418b68f7675d84efac3cc1d5102a27c

    • SHA256

      e145ac4a00751d7085350631cac819b8add0114b66ce36af7fd0165fdeb4c675

    • SHA512

      4e5a2f2d2b52b412c1b5e6e67681417c656c74ab928fbe830e8b04b67af8d314504e4c0fa6b124137283c737bf63c0319e6f284653c19e9c6c7ca4549d02d92f

    • SSDEEP

      3072:q2SAPvEjwY4FQE3hXJnVkmUtzg7ONeATtnJblE9+Uh74Ff7gaIKGr8YjU:q9jwbFQYhBVUVg7WFbl6tYU9ov

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks