Overview

overview

6

Static

static

bf3d68c989...1a.exe

windows7-x64

6

bf3d68c989...1a.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf3d68c98923f7af0a379118f2e560e546cf6e7de2f7bf77427b192ed070b21a

  • Size

    172KB

  • Sample

    221127-1e49bsag39

  • MD5

    7e6569a07feffa783c39b1249d96ec08

  • SHA1

    c49d7b52ce47fc3c96fa37b47efb8a6690a7eed3

  • SHA256

    bf3d68c98923f7af0a379118f2e560e546cf6e7de2f7bf77427b192ed070b21a

  • SHA512

    ca3156e87c52e3c9da379708274fc587a5549772043cd4002270350437456dbfb5e93dc12e910ecc728d8a5df6e895da16504af34c3dd4d0ab1412450c96c6ee

  • SSDEEP

    3072:FYBFL3xWBGkqljTJ0yeW+/x1XoUS0AxwLtOJiFa6mgnVoTBPMhtJj:FMFjxFkM0/x9GfJiw6kTZutx

Score
6/10
persistence

Malware Config

Targets

    • Target

      bf3d68c98923f7af0a379118f2e560e546cf6e7de2f7bf77427b192ed070b21a

    • Size

      172KB

    • MD5

      7e6569a07feffa783c39b1249d96ec08

    • SHA1

      c49d7b52ce47fc3c96fa37b47efb8a6690a7eed3

    • SHA256

      bf3d68c98923f7af0a379118f2e560e546cf6e7de2f7bf77427b192ed070b21a

    • SHA512

      ca3156e87c52e3c9da379708274fc587a5549772043cd4002270350437456dbfb5e93dc12e910ecc728d8a5df6e895da16504af34c3dd4d0ab1412450c96c6ee

    • SSDEEP

      3072:FYBFL3xWBGkqljTJ0yeW+/x1XoUS0AxwLtOJiFa6mgnVoTBPMhtJj:FMFjxFkM0/x9GfJiw6kTZutx

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks