Overview

overview

5

Static

static

d02f0c5dbb...fd.exe

windows7-x64

5

d02f0c5dbb...fd.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d02f0c5dbb8b3b8c17085754ad805e201fb1d858fab3dd205b9a7bed7fb25ffd

  • Size

    1.3MB

  • Sample

    221124-pgalysga5w

  • MD5

    12057b91855514e12273daec0a6a9215

  • SHA1

    b2a466b6e29d8c594967c9a576d3d0d4208f94ea

  • SHA256

    d02f0c5dbb8b3b8c17085754ad805e201fb1d858fab3dd205b9a7bed7fb25ffd

  • SHA512

    8344487ca10c9a13176fef3d73df13ee604eff9a10c2ab9c0dd37fe08b5819b3ee5cabf249fc370defea53826cb99d1dca055f9014a3d4aa8d89f9615a6d2e5a

  • SSDEEP

    24576:TrKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakM:TrKo4ZwCOnYjVmJPaj

Score
5/10

Malware Config

Targets

    • Target

      d02f0c5dbb8b3b8c17085754ad805e201fb1d858fab3dd205b9a7bed7fb25ffd

    • Size

      1.3MB

    • MD5

      12057b91855514e12273daec0a6a9215

    • SHA1

      b2a466b6e29d8c594967c9a576d3d0d4208f94ea

    • SHA256

      d02f0c5dbb8b3b8c17085754ad805e201fb1d858fab3dd205b9a7bed7fb25ffd

    • SHA512

      8344487ca10c9a13176fef3d73df13ee604eff9a10c2ab9c0dd37fe08b5819b3ee5cabf249fc370defea53826cb99d1dca055f9014a3d4aa8d89f9615a6d2e5a

    • SSDEEP

      24576:TrKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakM:TrKo4ZwCOnYjVmJPaj

    Score
    5/10

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks