Overview

overview

7

Static

static

volksbank_...02.exe

windows7-x64

7

volksbank_...02.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df2c41e0e9b0615369507eafb13bcc63b621aad55d74c2beb4ac7e57643227f5

  • Size

    146KB

  • Sample

    221124-khdb1sef3t

  • MD5

    da2a0c904b34433d8b2b035b4c60ff1f

  • SHA1

    9a5463c192d1387935f6023dc74d982bfa462feb

  • SHA256

    df2c41e0e9b0615369507eafb13bcc63b621aad55d74c2beb4ac7e57643227f5

  • SHA512

    1637ea14c435bb0c145d87888d78e27cf9ea027463b83949ed713395451aedcefe79fbc4216797964e7818ad0204ba59906d395f355589aaba5fbcd8e8765909

  • SSDEEP

    3072:63uL4suyftDcmLDLYYJQEIigwkZM7QWtcJWjRzvNNcIdlwC09BJQxd:63uL48ftDcmHz7PgDZJkjRzVOqnUMxd

Score
7/10
persistence

Malware Config

Targets

    • Target

      volksbank_de_transaktions_id_000023928001_2014_11_0000390382755_00003997550002.exe

    • Size

      176KB

    • MD5

      4a1d13a05a93cfaa8dd2627c696d2f0b

    • SHA1

      173c81da2aab91f225f8eb5e8fcc87119be4eff0

    • SHA256

      03f825726fdf3341bcfa36fcfd6dcd08e9d7ec3df982f7af9a290aa6f3c5647c

    • SHA512

      29269b35d3b041ccf08d2351e4f3fa906ed396e5a880b357398f2f72ba7a20ff870531b2d7febaa1e4173412074d6bc7bee5723ad683011ee4a247fb683e7301

    • SSDEEP

      3072:q6AMa+ceqZl+r4okWL23kjsZUQoRyV01WZIrLwwWyKdMd9zfp0T0:VfzsbWa3hZUHRHwwWy8UO4

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks