Overview

overview

8

Static

static

3bcea9fa1a...2d.exe

windows7-x64

8

3bcea9fa1a...2d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bcea9fa1acd45482ce76ee69440f63df7af8132d337aca9489d1d50a6796b2d

  • Size

    137KB

  • Sample

    221125-sz8s9abg6z

  • MD5

    c7fc2aeb7a9f0eb0084b0ca3df713888

  • SHA1

    94f3318cf229abbbbc43f64c92d13a9c74f81373

  • SHA256

    3bcea9fa1acd45482ce76ee69440f63df7af8132d337aca9489d1d50a6796b2d

  • SHA512

    e9766fafe25c5a6c4f3ff568c13e1f6fe6ef0c7d4282a268494aa49ee5a597e9acaa48fbe8516bad8228498e27fc09f9b7d66188ed6a4fc37d8afc49028ab449

  • SSDEEP

    3072:ccrSP5z8RCgm730aSEJcp9gH7y8BclYlcAYoruR8:RrSP5oRXm74p9R8BclYlcsrI8

Score
8/10
persistence

Malware Config

Targets

    • Target

      3bcea9fa1acd45482ce76ee69440f63df7af8132d337aca9489d1d50a6796b2d

    • Size

      137KB

    • MD5

      c7fc2aeb7a9f0eb0084b0ca3df713888

    • SHA1

      94f3318cf229abbbbc43f64c92d13a9c74f81373

    • SHA256

      3bcea9fa1acd45482ce76ee69440f63df7af8132d337aca9489d1d50a6796b2d

    • SHA512

      e9766fafe25c5a6c4f3ff568c13e1f6fe6ef0c7d4282a268494aa49ee5a597e9acaa48fbe8516bad8228498e27fc09f9b7d66188ed6a4fc37d8afc49028ab449

    • SSDEEP

      3072:ccrSP5z8RCgm730aSEJcp9gH7y8BclYlcAYoruR8:RrSP5oRXm74p9R8BclYlcsrI8

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks