Overview

overview

8

Static

static

457bd4c1fc...48.exe

windows7-x64

8

457bd4c1fc...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    457bd4c1fccfea7859193dd7c1beab71652ee9c1da2e37412ed7f3283ed06548

  • Size

    392KB

  • Sample

    221127-cd89wsbg68

  • MD5

    34d1e051ad1aca129104a602b82e703f

  • SHA1

    82cbf95bee2a2304fa43a26040dfaf2b9bfe97b6

  • SHA256

    457bd4c1fccfea7859193dd7c1beab71652ee9c1da2e37412ed7f3283ed06548

  • SHA512

    96021904110dc4e4b5d7f0f88541dabf7a986a92e7796f81813a82fc06cdbf24bf27a304cca887bc0fcac23d32260c98e30aa90345ac49fa9b940aef2318d5ee

  • SSDEEP

    6144:Tlu3JdTglIygRKzB93SxOO3y0hoE3gn61Y2RTjUo2l:psJlgHt93QfXoEQ61YujQ

Score
8/10
persistence

Malware Config

Targets

    • Target

      457bd4c1fccfea7859193dd7c1beab71652ee9c1da2e37412ed7f3283ed06548

    • Size

      392KB

    • MD5

      34d1e051ad1aca129104a602b82e703f

    • SHA1

      82cbf95bee2a2304fa43a26040dfaf2b9bfe97b6

    • SHA256

      457bd4c1fccfea7859193dd7c1beab71652ee9c1da2e37412ed7f3283ed06548

    • SHA512

      96021904110dc4e4b5d7f0f88541dabf7a986a92e7796f81813a82fc06cdbf24bf27a304cca887bc0fcac23d32260c98e30aa90345ac49fa9b940aef2318d5ee

    • SSDEEP

      6144:Tlu3JdTglIygRKzB93SxOO3y0hoE3gn61Y2RTjUo2l:psJlgHt93QfXoEQ61YujQ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks