Overview

overview

7

Static

static

2014_11rec...05.exe

windows7-x64

7

2014_11rec...05.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b84034234cb34fee2fa90411d50a5cf8e60ea1b383c9f7572da91ae061ed336

  • Size

    118KB

  • Sample

    221125-wgrzkadc66

  • MD5

    8dd4d7403a6c4c6580d9861b5c44599f

  • SHA1

    99f904f2fbec3e526e22b61b1221fd2ccc74048b

  • SHA256

    5b84034234cb34fee2fa90411d50a5cf8e60ea1b383c9f7572da91ae061ed336

  • SHA512

    97c4dbb1c118a03781b0a578f89db4b41932a907827abf459b4740d16711e0c66c0872aed45f34325cb959958abf9704c430095f20dfea58c7ec774936d506ec

  • SSDEEP

    3072:mNWe/2fcgy+4cfWonVygq2xW+lQDuZz4AYOr8Tb7Yw:K/R+4wRY+lBF4AYOr8Tbcw

Score
7/10
persistence

Malware Config

Targets

    • Target

      2014_11rechnung_pdf_telekom_0000283882_november_00288273_11_0000000392_000005.exe

    • Size

      148KB

    • MD5

      6d114c7a21aab94456d8e8d4aef88362

    • SHA1

      1229f292c46ffa1bde2db69227c4e98c2e46ae3a

    • SHA256

      0b577f76b08c5267eb5f2f8596127a28a6eaf5ff2089cff6be0b689f31850124

    • SHA512

      828b656d5eeb4e225af9bc76fad68fd51f5bc6a867450f200e005782231cfd762ceef3d2341aa9e2dcfca9db656637dda71ee6b93083664a36e15f02a0342e03

    • SSDEEP

      3072:5fSj3q4+o/mYSpVygq2xW+rQDuZz4AYOr8Hkv:xSusZSXRY+rBF4AYOr8

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks