Overview

overview

8

Static

static

7f5e4fcad1...7b.exe

windows7-x64

8

7f5e4fcad1...7b.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b

  • Size

    269KB

  • Sample

    221125-szj5wsge59

  • MD5

    58976e5821ae6701f6aabbc279951cc0

  • SHA1

    9878db60426f3b0de4535afc4573c612b05cfe28

  • SHA256

    7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b

  • SHA512

    8c76c202e2cec464e4586cffa72bb18bd47adcbd8e2e17163287f88475368cc8b06657210c2af639a2d17b64cf623a857be5542fbf4da555e1f2f122de4c51d7

  • SSDEEP

    6144:7iQ4+wpCBAiKc3yu7svlVVQWx5lkinovBfBD+D3SMHZzA:7jwcBlHL7sdl5oJpASMHZc

Score
8/10
persistence

Malware Config

Targets

    • Target

      7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b

    • Size

      269KB

    • MD5

      58976e5821ae6701f6aabbc279951cc0

    • SHA1

      9878db60426f3b0de4535afc4573c612b05cfe28

    • SHA256

      7f5e4fcad117286fc9a04917aea47cfd4ccb2805803f4be07f913d399a6cb67b

    • SHA512

      8c76c202e2cec464e4586cffa72bb18bd47adcbd8e2e17163287f88475368cc8b06657210c2af639a2d17b64cf623a857be5542fbf4da555e1f2f122de4c51d7

    • SSDEEP

      6144:7iQ4+wpCBAiKc3yu7svlVVQWx5lkinovBfBD+D3SMHZzA:7jwcBlHL7sdl5oJpASMHZc

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks