Overview

overview

8

Static

static

6acbb3aab4...f7.exe

windows7-x64

8

6acbb3aab4...f7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6acbb3aab4fc444a9d45c4a2b3c2072ccc654ba2e9f97352274c2ef1637532f7

  • Size

    289KB

  • Sample

    221125-jkwqpsfc2s

  • MD5

    34e4a14c0c853995c50f9d0cb82f75f4

  • SHA1

    95998cfae8f4f1465625e94e0d26c3952086e14d

  • SHA256

    6acbb3aab4fc444a9d45c4a2b3c2072ccc654ba2e9f97352274c2ef1637532f7

  • SHA512

    bacd48ef0efe2d9eff381668bdc7aa019c084d3e5bf4ca9fc56c9a846481a0ae64ce87fb21377b8900d797c46b38e82896e0808f0268b46bc2ca66c37af658f5

  • SSDEEP

    6144:IyBPVN5jumxWlhqY3SuhJKokRU143jUligDgT3+6:rpH/01Suh8okRx3xQgT3+6

Score
8/10
persistence

Malware Config

Targets

    • Target

      6acbb3aab4fc444a9d45c4a2b3c2072ccc654ba2e9f97352274c2ef1637532f7

    • Size

      289KB

    • MD5

      34e4a14c0c853995c50f9d0cb82f75f4

    • SHA1

      95998cfae8f4f1465625e94e0d26c3952086e14d

    • SHA256

      6acbb3aab4fc444a9d45c4a2b3c2072ccc654ba2e9f97352274c2ef1637532f7

    • SHA512

      bacd48ef0efe2d9eff381668bdc7aa019c084d3e5bf4ca9fc56c9a846481a0ae64ce87fb21377b8900d797c46b38e82896e0808f0268b46bc2ca66c37af658f5

    • SSDEEP

      6144:IyBPVN5jumxWlhqY3SuhJKokRU143jUligDgT3+6:rpH/01Suh8okRx3xQgT3+6

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks