Overview

overview

7

Static

static

2014_11vod...45.exe

windows7-x64

7

2014_11vod...45.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    84d387d1d1341a35770f1dad7379fb6336f2a6ae4f0b807466068a5b0923b3a7

  • Size

    129KB

  • Sample

    221125-wd84nsgc9w

  • MD5

    875edf3a2f680bfb0b1192ffc2b6471c

  • SHA1

    cdf944b2d188ccc4c7a177243b85359c6230e236

  • SHA256

    84d387d1d1341a35770f1dad7379fb6336f2a6ae4f0b807466068a5b0923b3a7

  • SHA512

    e1a2e5c08cd6d249e7ff645ad76475301c8cfd293becd5494ba012536272716b4f4ac7919dde3084bed13c0842e3b9087eee996c59c9e659a3aa921bca7c7a8e

  • SSDEEP

    3072:eTFsY6kNJdJxFUBGvLyTfQPtIs/nawsVY5Tftm1:e2GNJdJxFmOLUQPtItuBY

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11vodafone_onlinerechnung_002120003909_november_390321980009_11_00000000445.exe

    • Size

      204KB

    • MD5

      a6b481c3a243bc0aa191cba03e6c8add

    • SHA1

      a8cdaba062f0ccdb697e50538f6f71606ed41ea8

    • SHA256

      3d4dc9be1d3095549994379cad141935e3d217d6d8f6616cf2970de85dcbdfe9

    • SHA512

      9ada3ebe7af6e8d560674e28ba1816b6d203e4aa0e4bc7c92089820d01e33db3acebbca0c9d6aa65f614993eca810c0526271ad2a07487a8588e497e39cfa2cf

    • SSDEEP

      3072:n2bbeGI6JI9TIFxFUBGvLyTfQP9Is/nawsVdW4F9owQ:HGLWqxFmOLUQP9ItI4F9XQ

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks