Overview

overview

8

Static

static

d0cad76b2c...7b.exe

windows7-x64

8

d0cad76b2c...7b.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0cad76b2cd313f7346ad89787a7a03249638cc4a848df8246e0edf6f118737b

  • Size

    262KB

  • Sample

    221124-mamxlaah9s

  • MD5

    bb1ad57760a1ca3fdffd86c2539c7031

  • SHA1

    e29b1944ce1d7dd3b611adb6dec5e99e0bb4e141

  • SHA256

    d0cad76b2cd313f7346ad89787a7a03249638cc4a848df8246e0edf6f118737b

  • SHA512

    4facb0b42ddd92b304c7f5c4f5488585cbbf7473fff07c8549d7a8ad50b3352810b8f387fd6ca86af0b455831b9c819900dbf4502a7f2c9fa4fc257fd193e443

  • SSDEEP

    6144:UpNzqRprtJZaWmGcqRoOUeMz122/lSzsLt/pVkMM:UvqLk/eLU1cYlSzC/cMM

Score
8/10
persistence

Malware Config

Targets

    • Target

      d0cad76b2cd313f7346ad89787a7a03249638cc4a848df8246e0edf6f118737b

    • Size

      262KB

    • MD5

      bb1ad57760a1ca3fdffd86c2539c7031

    • SHA1

      e29b1944ce1d7dd3b611adb6dec5e99e0bb4e141

    • SHA256

      d0cad76b2cd313f7346ad89787a7a03249638cc4a848df8246e0edf6f118737b

    • SHA512

      4facb0b42ddd92b304c7f5c4f5488585cbbf7473fff07c8549d7a8ad50b3352810b8f387fd6ca86af0b455831b9c819900dbf4502a7f2c9fa4fc257fd193e443

    • SSDEEP

      6144:UpNzqRprtJZaWmGcqRoOUeMz122/lSzsLt/pVkMM:UvqLk/eLU1cYlSzC/cMM

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks