Overview

overview

7

Static

static

2014_11rec...05.exe

windows7-x64

7

2014_11rec...05.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c149e109e502cb82ee0f7f8ab0205746c0c0ff4578b50e3f836a21816b41a8c7

  • Size

    118KB

  • Sample

    221125-wgfljagd8w

  • MD5

    f0498751c481d0e3d1bc3cf7797f90df

  • SHA1

    f3d0f8a680cf72860d097f99e73c805a38d34a2b

  • SHA256

    c149e109e502cb82ee0f7f8ab0205746c0c0ff4578b50e3f836a21816b41a8c7

  • SHA512

    c40487658cee49722ed93075e36c10d28b189eeca22b0257131fcb151555318adc9fefe8a6a4e5fcd24c04ad94279de9d88f3fc5e2ac9aec6e85488d4f85e5f7

  • SSDEEP

    3072:rNWe/2fcgy+4cfWonVygq2xW+lQDuZz4AYOr8Tb7YH:v/R+4wRY+lBF4AYOr8TbcH

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11rechnung_pdf_telekom_0000283882_november_00288273_11_0000000392_000005.exe

    • Size

      148KB

    • MD5

      6d114c7a21aab94456d8e8d4aef88362

    • SHA1

      1229f292c46ffa1bde2db69227c4e98c2e46ae3a

    • SHA256

      0b577f76b08c5267eb5f2f8596127a28a6eaf5ff2089cff6be0b689f31850124

    • SHA512

      828b656d5eeb4e225af9bc76fad68fd51f5bc6a867450f200e005782231cfd762ceef3d2341aa9e2dcfca9db656637dda71ee6b93083664a36e15f02a0342e03

    • SSDEEP

      3072:5fSj3q4+o/mYSpVygq2xW+rQDuZz4AYOr8Hkv:xSusZSXRY+rBF4AYOr8

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks