Overview

overview

7

Static

static

2014_11vod...45.exe

windows7-x64

7

2014_11vod...45.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16188a12150fe475eb43288d37455c146a186fb238f3fc2c94fd898087c8d26a

  • Size

    129KB

  • Sample

    221125-wenjcsdb63

  • MD5

    7528eef1180366b96f01cc7bd437f15a

  • SHA1

    21aca9e9d4032a42bb147f7de6c03e4b87fb9832

  • SHA256

    16188a12150fe475eb43288d37455c146a186fb238f3fc2c94fd898087c8d26a

  • SHA512

    64b193b5e10c447f6586bf9271c71e426e17aa566a84e5e384f4e45ed9c4d160ffb93124b3ed9683536c36b849a1d79a5cbd3b500bd3d41ed6e255a4c672c620

  • SSDEEP

    3072:+TFsY6kNJdJxFUBGvLyTfQPtIs/nawsVY5TftmV:+2GNJdJxFmOLUQPtItuB4

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11vodafone_onlinerechnung_002120003909_november_390321980009_11_00000000445.exe

    • Size

      204KB

    • MD5

      a6b481c3a243bc0aa191cba03e6c8add

    • SHA1

      a8cdaba062f0ccdb697e50538f6f71606ed41ea8

    • SHA256

      3d4dc9be1d3095549994379cad141935e3d217d6d8f6616cf2970de85dcbdfe9

    • SHA512

      9ada3ebe7af6e8d560674e28ba1816b6d203e4aa0e4bc7c92089820d01e33db3acebbca0c9d6aa65f614993eca810c0526271ad2a07487a8588e497e39cfa2cf

    • SSDEEP

      3072:n2bbeGI6JI9TIFxFUBGvLyTfQP9Is/nawsVdW4F9owQ:HGLWqxFmOLUQP9ItI4F9XQ

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks