Overview

overview

8

Static

static

0955e1e7df...d8.exe

windows7-x64

8

0955e1e7df...d8.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0955e1e7dfba12be75f1f0aef07bbcba6aa88857f81c8f9934662d282f624fd8

  • Size

    310KB

  • Sample

    221125-1p6vxahc77

  • MD5

    a7b099621c6bdd4099a2188d8a5bacfe

  • SHA1

    687a3330f2b29ee12bf763053f6eb623902368fd

  • SHA256

    0955e1e7dfba12be75f1f0aef07bbcba6aa88857f81c8f9934662d282f624fd8

  • SHA512

    1027e07401b3345e253b62cb642a0e3db0f9724abbfbe5fc20ce2a1faf63602d9efb749394a78bb2341b050c467b2a0f4779fb93d00730b4fdcb5a1e1a34771c

  • SSDEEP

    6144:siXdpfjUWlJgwzYfyeivDTCoEAw6hPT6ZKj+nQ0ijGwpQiI8yJngYjQ8pwRy3:siXdyWEZfyhDGxG2sjN0ijGKRI8y2Ylh

Score
8/10
persistence

Malware Config

Targets

    • Target

      0955e1e7dfba12be75f1f0aef07bbcba6aa88857f81c8f9934662d282f624fd8

    • Size

      310KB

    • MD5

      a7b099621c6bdd4099a2188d8a5bacfe

    • SHA1

      687a3330f2b29ee12bf763053f6eb623902368fd

    • SHA256

      0955e1e7dfba12be75f1f0aef07bbcba6aa88857f81c8f9934662d282f624fd8

    • SHA512

      1027e07401b3345e253b62cb642a0e3db0f9724abbfbe5fc20ce2a1faf63602d9efb749394a78bb2341b050c467b2a0f4779fb93d00730b4fdcb5a1e1a34771c

    • SSDEEP

      6144:siXdpfjUWlJgwzYfyeivDTCoEAw6hPT6ZKj+nQ0ijGwpQiI8yJngYjQ8pwRy3:siXdyWEZfyhDGxG2sjN0ijGKRI8y2Ylh

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks