Overview

overview

8

Static

static

7defc77d4d...30.exe

windows7-x64

8

7defc77d4d...30.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7defc77d4dd708a8daa6c58c392f47a0049ffdeb477162ec12cc3a143cd31730

  • Size

    138KB

  • Sample

    221124-lbjqwsdf93

  • MD5

    9669323d6135f537c189e9d0b210cda9

  • SHA1

    d5084e9cc5732552dfd57272e0ef7527501ac1da

  • SHA256

    7defc77d4dd708a8daa6c58c392f47a0049ffdeb477162ec12cc3a143cd31730

  • SHA512

    876ca17dd60edbad06dfae8fec70113c98df61813f729f250f6d7f1366decac84fd8e4a521f8865ada0708cfc58b4257020a6fa9a8bf539d971b0126b4360a11

  • SSDEEP

    3072:qz/1LZQEduEgsW2UPqxUEjqkC0i50/YXiQXT+t/8XIgfUTaXD3kz1QNg:qz/1L+QHhUPqxUEhQiQwkXhfUThQq

Score
8/10
persistence

Malware Config

Targets

    • Target

      7defc77d4dd708a8daa6c58c392f47a0049ffdeb477162ec12cc3a143cd31730

    • Size

      138KB

    • MD5

      9669323d6135f537c189e9d0b210cda9

    • SHA1

      d5084e9cc5732552dfd57272e0ef7527501ac1da

    • SHA256

      7defc77d4dd708a8daa6c58c392f47a0049ffdeb477162ec12cc3a143cd31730

    • SHA512

      876ca17dd60edbad06dfae8fec70113c98df61813f729f250f6d7f1366decac84fd8e4a521f8865ada0708cfc58b4257020a6fa9a8bf539d971b0126b4360a11

    • SSDEEP

      3072:qz/1LZQEduEgsW2UPqxUEjqkC0i50/YXiQXT+t/8XIgfUTaXD3kz1QNg:qz/1L+QHhUPqxUEhQiQwkXhfUThQq

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks