Overview

overview

6

Static

static

5

d94da682c6...eb.exe

windows7-x64

6

d94da682c6...eb.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d94da682c6607cd589179018cecc0f15966ef1d62be0fc93facbf982d45e3ceb

  • Size

    3.8MB

  • Sample

    221127-l6h3vahc58

  • MD5

    c30f91ed662f35a15baf128d7c5b3747

  • SHA1

    9147017e722cfa6b869b3808f79a5995a91303a1

  • SHA256

    d94da682c6607cd589179018cecc0f15966ef1d62be0fc93facbf982d45e3ceb

  • SHA512

    19179ce4cc7131aea2e2011f49b46b3caa87b07e26b6b7897fd68a394fac3b3107ef025cac3484f51a22c31daf38abbca52b1144afcf64f9081df556df7f508d

  • SSDEEP

    49152:4Vg5tQ7aoj15YJH6nS1fc4L6Lek+kZn+jwPmse1Nc3KPzw3zZThYFv+jfHNl6Cvw:6g56OH6Ofc4egjwPmsSQRcv+JwOw

Score
6/10
collectionpersistence

Malware Config

Targets

    • Target

      d94da682c6607cd589179018cecc0f15966ef1d62be0fc93facbf982d45e3ceb

    • Size

      3.8MB

    • MD5

      c30f91ed662f35a15baf128d7c5b3747

    • SHA1

      9147017e722cfa6b869b3808f79a5995a91303a1

    • SHA256

      d94da682c6607cd589179018cecc0f15966ef1d62be0fc93facbf982d45e3ceb

    • SHA512

      19179ce4cc7131aea2e2011f49b46b3caa87b07e26b6b7897fd68a394fac3b3107ef025cac3484f51a22c31daf38abbca52b1144afcf64f9081df556df7f508d

    • SSDEEP

      49152:4Vg5tQ7aoj15YJH6nS1fc4L6Lek+kZn+jwPmse1Nc3KPzw3zZThYFv+jfHNl6Cvw:6g56OH6Ofc4egjwPmsSQRcv+JwOw

    Score
    6/10
    collectionpersistence

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks