Overview

overview

8

Static

static

5

7e5b16e6f5...e9.exe

windows7-x64

8

7e5b16e6f5...e9.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e5b16e6f51e610fe4b71e3cfb575eb752bda65cb083eb421af19b0ee0e2f4e9

  • Size

    1.0MB

  • Sample

    221124-ljfzzahb6z

  • MD5

    70ce94b6dd83636e2421a9e755f80631

  • SHA1

    0349f12f34a4ab6fc5f2718c2ab9ad5a1eb4621a

  • SHA256

    7e5b16e6f51e610fe4b71e3cfb575eb752bda65cb083eb421af19b0ee0e2f4e9

  • SHA512

    92914a69dd9bcff430b5ca49248518ad80eafa776e86618690664cfa04d0dc2febb9d41237d4f5135129192c999692f5f1c65b5522e3a509aed90fbaedd167af

  • SSDEEP

    24576:wRmJkcoQricOIQxiZY1ia9hTMb/1EBEq5tySj:FJZoQrbTFZY1iarT7

Score
8/10
persistence

Malware Config

Targets

    • Target

      7e5b16e6f51e610fe4b71e3cfb575eb752bda65cb083eb421af19b0ee0e2f4e9

    • Size

      1.0MB

    • MD5

      70ce94b6dd83636e2421a9e755f80631

    • SHA1

      0349f12f34a4ab6fc5f2718c2ab9ad5a1eb4621a

    • SHA256

      7e5b16e6f51e610fe4b71e3cfb575eb752bda65cb083eb421af19b0ee0e2f4e9

    • SHA512

      92914a69dd9bcff430b5ca49248518ad80eafa776e86618690664cfa04d0dc2febb9d41237d4f5135129192c999692f5f1c65b5522e3a509aed90fbaedd167af

    • SSDEEP

      24576:wRmJkcoQricOIQxiZY1ia9hTMb/1EBEq5tySj:FJZoQrbTFZY1iarT7

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks