Overview

overview

6

Static

static

5744e638ae...08.exe

windows7-x64

5

5744e638ae...08.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5744e638ae13767d77a9c354e9af4c9511728ac634f9ab9174f17be3fc9f0c08

  • Size

    126KB

  • Sample

    221127-16sdvagd8x

  • MD5

    0672c47aa14eced4fa4d2454d4b5f611

  • SHA1

    f57e972527a7a0bf1450df2c7c5ab645a3490687

  • SHA256

    5744e638ae13767d77a9c354e9af4c9511728ac634f9ab9174f17be3fc9f0c08

  • SHA512

    c26b149526751b69c2e13721a44dbc74d56422fbc0c6d21e2a7a6af494b5b6e3c969777c742f6549eb2a6d5c6128ac4814b2fdb353473b71044aeb77fa4a1ede

  • SSDEEP

    1536:uF9iCnUrNQUF7UB8wug4Hvq/zkjDRwquoPIv6vH4fxuB4F0YZjyBFF8zRI:OQNQUlW8wuNi/o6qnfHyxu4FhZOv4a

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      5744e638ae13767d77a9c354e9af4c9511728ac634f9ab9174f17be3fc9f0c08

    • Size

      126KB

    • MD5

      0672c47aa14eced4fa4d2454d4b5f611

    • SHA1

      f57e972527a7a0bf1450df2c7c5ab645a3490687

    • SHA256

      5744e638ae13767d77a9c354e9af4c9511728ac634f9ab9174f17be3fc9f0c08

    • SHA512

      c26b149526751b69c2e13721a44dbc74d56422fbc0c6d21e2a7a6af494b5b6e3c969777c742f6549eb2a6d5c6128ac4814b2fdb353473b71044aeb77fa4a1ede

    • SSDEEP

      1536:uF9iCnUrNQUF7UB8wug4Hvq/zkjDRwquoPIv6vH4fxuB4F0YZjyBFF8zRI:OQNQUlW8wuNi/o6qnfHyxu4FhZOv4a

    Score
    6/10
    microsoftpersistencephishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks