Overview

overview

8

Static

static

3ae7e0ec91...0b.exe

windows7-x64

8

3ae7e0ec91...0b.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ae7e0ec9136e2a38b4406623e1857216114d4957225eed9c9b59eda8828a20b

  • Size

    250KB

  • Sample

    221125-c6dcxsfb57

  • MD5

    e2fc6622df04539333700bf7e97720d6

  • SHA1

    7880697d1cceaa3c342efded16efa06eaa143cb4

  • SHA256

    3ae7e0ec9136e2a38b4406623e1857216114d4957225eed9c9b59eda8828a20b

  • SHA512

    dd5fdf0d0a7ea51418388ec4a33506c9a93976017575505c10fe27b9873a6a29bc884bfd2ee399459f8a64b5fe4e7e5dd21b038fecc8e9da0332e5b5d80390c8

  • SSDEEP

    3072:aGsuwd8Zp2GO7LcCFi15QPRytM4Ao+Dvy6RZY6DKJUdQrGk2i35uPOtUVcd:3VwIU7L+1KF4VIlRZY6+UdQrGk2G++

Score
8/10
persistence

Malware Config

Targets

    • Target

      3ae7e0ec9136e2a38b4406623e1857216114d4957225eed9c9b59eda8828a20b

    • Size

      250KB

    • MD5

      e2fc6622df04539333700bf7e97720d6

    • SHA1

      7880697d1cceaa3c342efded16efa06eaa143cb4

    • SHA256

      3ae7e0ec9136e2a38b4406623e1857216114d4957225eed9c9b59eda8828a20b

    • SHA512

      dd5fdf0d0a7ea51418388ec4a33506c9a93976017575505c10fe27b9873a6a29bc884bfd2ee399459f8a64b5fe4e7e5dd21b038fecc8e9da0332e5b5d80390c8

    • SSDEEP

      3072:aGsuwd8Zp2GO7LcCFi15QPRytM4Ao+Dvy6RZY6DKJUdQrGk2i35uPOtUVcd:3VwIU7L+1KF4VIlRZY6+UdQrGk2G++

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks