Overview

overview

7

Static

static

5d64115f41...78.exe

windows7-x64

7

5d64115f41...78.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d64115f415968c4e7ca7608e7133b91d49f8311501cd50fba249bfdf8d20478

  • Size

    2.7MB

  • Sample

    221125-j75bcsgg7z

  • MD5

    ed9379b8b05d87bca984cf59aa948abb

  • SHA1

    ed1dd2224701506a32e3daf83b07bd5cde001421

  • SHA256

    5d64115f415968c4e7ca7608e7133b91d49f8311501cd50fba249bfdf8d20478

  • SHA512

    7c4efde1e88c9faa1ccdb26c654fd25a008a64fd855e9a8d1be303a2d5e3bbe36454102383321a650d1171f47946fd09223fbfbdef7a0ce356d0a809a75e22b1

  • SSDEEP

    49152:/PEPY6U8RuY53G9hvFi1aXvfeFMIvmvaZmGxhzHYkx3hTRRGTQGoQ2I8sC7tcbCg:6P3Rr3G9hdRfgPvjYSTbG0Goa8suGbqW

Score
7/10
persistence

Malware Config

Targets

    • Target

      5d64115f415968c4e7ca7608e7133b91d49f8311501cd50fba249bfdf8d20478

    • Size

      2.7MB

    • MD5

      ed9379b8b05d87bca984cf59aa948abb

    • SHA1

      ed1dd2224701506a32e3daf83b07bd5cde001421

    • SHA256

      5d64115f415968c4e7ca7608e7133b91d49f8311501cd50fba249bfdf8d20478

    • SHA512

      7c4efde1e88c9faa1ccdb26c654fd25a008a64fd855e9a8d1be303a2d5e3bbe36454102383321a650d1171f47946fd09223fbfbdef7a0ce356d0a809a75e22b1

    • SSDEEP

      49152:/PEPY6U8RuY53G9hvFi1aXvfeFMIvmvaZmGxhzHYkx3hTRRGTQGoQ2I8sC7tcbCg:6P3Rr3G9hdRfgPvjYSTbG0Goa8suGbqW

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks