Overview

overview

8

Static

static

c304e4a792...07.exe

windows7-x64

8

c304e4a792...07.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c304e4a7921896c51bad4ba220196b7063440156e2400173fbdd801b8c54fc07

  • Size

    367KB

  • Sample

    221124-yd4v3aee55

  • MD5

    cb09b98325f277a73fc65aeef580527e

  • SHA1

    bd5a500c4d35a612d3043effdb96786d8b345edf

  • SHA256

    c304e4a7921896c51bad4ba220196b7063440156e2400173fbdd801b8c54fc07

  • SHA512

    0ea13925ba66677e6fb22493c9f749e649b17fad0548645c2c9bb37ace0275e5d07f5eb55d41a8f9e7fadaa9e959f8d4f6311f2e3431f97bb5d6492a58d3e171

  • SSDEEP

    3072:N1uMX4rv7jtHXyamOabGu7rV4XA+uCGqSrAIs3AWQLfuc630JY6SokEn9o7RBCDK:NN4bn1aqjFutqSkIhVm30JTaCM

Score
8/10
persistence

Malware Config

Targets

    • Target

      c304e4a7921896c51bad4ba220196b7063440156e2400173fbdd801b8c54fc07

    • Size

      367KB

    • MD5

      cb09b98325f277a73fc65aeef580527e

    • SHA1

      bd5a500c4d35a612d3043effdb96786d8b345edf

    • SHA256

      c304e4a7921896c51bad4ba220196b7063440156e2400173fbdd801b8c54fc07

    • SHA512

      0ea13925ba66677e6fb22493c9f749e649b17fad0548645c2c9bb37ace0275e5d07f5eb55d41a8f9e7fadaa9e959f8d4f6311f2e3431f97bb5d6492a58d3e171

    • SSDEEP

      3072:N1uMX4rv7jtHXyamOabGu7rV4XA+uCGqSrAIs3AWQLfuc630JY6SokEn9o7RBCDK:NN4bn1aqjFutqSkIhVm30JTaCM

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks