Overview

overview

8

Static

static

9d7e92b946...97.exe

windows7-x64

8

9d7e92b946...97.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d7e92b946e9fcce820470d8d6c57ca8ca2f6f76f4b95c5583fdd56fceb16b97

  • Size

    93KB

  • Sample

    221127-getytadb63

  • MD5

    c8ef7e0f7816df4fc6548a6d3b2ef3ea

  • SHA1

    0a8f9d53f701b59a0a3834e7920e58799deaa073

  • SHA256

    9d7e92b946e9fcce820470d8d6c57ca8ca2f6f76f4b95c5583fdd56fceb16b97

  • SHA512

    861235643cf3dcbb3c19a6aaac8556020bf3988670b5de119d44ed8e483c483b9b5ceb89dddc51fc28dc188f76bb863ea7fb5f31ce143f61e380738e7096c8f0

  • SSDEEP

    1536:XwH8vwlr3QF/GTqg8HLhobQLAfm5b8HLljs2mwEhstzWrYe:yblr39Og8HlKQLAfMmLljJmwEixWrN

Score
8/10
persistence

Malware Config

Targets

    • Target

      9d7e92b946e9fcce820470d8d6c57ca8ca2f6f76f4b95c5583fdd56fceb16b97

    • Size

      93KB

    • MD5

      c8ef7e0f7816df4fc6548a6d3b2ef3ea

    • SHA1

      0a8f9d53f701b59a0a3834e7920e58799deaa073

    • SHA256

      9d7e92b946e9fcce820470d8d6c57ca8ca2f6f76f4b95c5583fdd56fceb16b97

    • SHA512

      861235643cf3dcbb3c19a6aaac8556020bf3988670b5de119d44ed8e483c483b9b5ceb89dddc51fc28dc188f76bb863ea7fb5f31ce143f61e380738e7096c8f0

    • SSDEEP

      1536:XwH8vwlr3QF/GTqg8HLhobQLAfm5b8HLljs2mwEhstzWrYe:yblr39Og8HlKQLAfMmLljJmwEixWrN

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks