Overview

overview

8

Static

static

e054139ab4...95.exe

windows7-x64

8

e054139ab4...95.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e054139ab45a294dbf1646fa2bae4b3c6499b1786ec020841b8ef22d2235cc95

  • Size

    284KB

  • Sample

    221124-wnw7vsah62

  • MD5

    73d05d023ab5f49ee2000db0f7e0d8d6

  • SHA1

    a2d9d2a85eae686d298e52e3d066a5fe1f5b1003

  • SHA256

    e054139ab45a294dbf1646fa2bae4b3c6499b1786ec020841b8ef22d2235cc95

  • SHA512

    2491bf9c402e2fcb16bdad7eff664d0bde37ea9761002fefcd17980b74da6e025ce0b3dd57dc4b81ff650e2ab343ef3e302befbccb9751aec0a18d3de5171719

  • SSDEEP

    6144:bsWxkEzhZ27XWd53WvjBgSB7Vsm5e4KHvA:g2m2lWBB7Vs4Qv

Score
8/10
persistence

Malware Config

Targets

    • Target

      e054139ab45a294dbf1646fa2bae4b3c6499b1786ec020841b8ef22d2235cc95

    • Size

      284KB

    • MD5

      73d05d023ab5f49ee2000db0f7e0d8d6

    • SHA1

      a2d9d2a85eae686d298e52e3d066a5fe1f5b1003

    • SHA256

      e054139ab45a294dbf1646fa2bae4b3c6499b1786ec020841b8ef22d2235cc95

    • SHA512

      2491bf9c402e2fcb16bdad7eff664d0bde37ea9761002fefcd17980b74da6e025ce0b3dd57dc4b81ff650e2ab343ef3e302befbccb9751aec0a18d3de5171719

    • SSDEEP

      6144:bsWxkEzhZ27XWd53WvjBgSB7Vsm5e4KHvA:g2m2lWBB7Vs4Qv

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks