Overview

overview

6

Static

static

5

65155ea498...f7.exe

windows7-x64

6

65155ea498...f7.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65155ea49861e633272ca449655b37db081e9f60d51560e6ed1bfe0ae48808f7

  • Size

    3.4MB

  • Sample

    221126-r8ljmseh5s

  • MD5

    db1c0b02811c6ae44d3ef2feb8b1f7c7

  • SHA1

    778b6e432ba56a38518114ec479afa59a4651044

  • SHA256

    65155ea49861e633272ca449655b37db081e9f60d51560e6ed1bfe0ae48808f7

  • SHA512

    4b4337876ee63a72ccc2582a61faacc3db75e7ade54289387a66f0042377b6de8834abcfb5f33f07beef2bea6b0a1e9e41a2e21f8eaa088c825e175e31315e5c

  • SSDEEP

    49152:1Vg5tQ7aOY5wHs5uVraYgTnuTfPWeG3K22Kl6UHjE7kfLr3ICR64n/vgdFaOHEkY:7g56X2uBlWo3WeIT4WLt0Sv4cOkke89I

Score
6/10
collectionpersistence

Malware Config

Targets

    • Target

      65155ea49861e633272ca449655b37db081e9f60d51560e6ed1bfe0ae48808f7

    • Size

      3.4MB

    • MD5

      db1c0b02811c6ae44d3ef2feb8b1f7c7

    • SHA1

      778b6e432ba56a38518114ec479afa59a4651044

    • SHA256

      65155ea49861e633272ca449655b37db081e9f60d51560e6ed1bfe0ae48808f7

    • SHA512

      4b4337876ee63a72ccc2582a61faacc3db75e7ade54289387a66f0042377b6de8834abcfb5f33f07beef2bea6b0a1e9e41a2e21f8eaa088c825e175e31315e5c

    • SSDEEP

      49152:1Vg5tQ7aOY5wHs5uVraYgTnuTfPWeG3K22Kl6UHjE7kfLr3ICR64n/vgdFaOHEkY:7g56X2uBlWo3WeIT4WLt0Sv4cOkke89I

    Score
    6/10
    collectionpersistence

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks