Overview

overview

6

Static

static

fa5eb5f3fd...48.exe

windows7-x64

6

fa5eb5f3fd...48.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa5eb5f3fd902b8d965c7a47ee7637eb1ac19932d8cc1f85bfbc8b748ea0cd48

  • Size

    444KB

  • Sample

    221127-lay47aaf71

  • MD5

    fc6169d63790736c07e97d730adea3a7

  • SHA1

    76707755af00f40ee722deafae6761ba8f5150b8

  • SHA256

    fa5eb5f3fd902b8d965c7a47ee7637eb1ac19932d8cc1f85bfbc8b748ea0cd48

  • SHA512

    53bb5c67e3111560beba4e0f880328536de73341371686b45fc1efef7859877a898ed90841b016639fbe783c3b37d2a4d0dc8769a59d07e860d203e3f7ecf2cb

  • SSDEEP

    12288:0WAIaYUk3MZES/IVR2GygQDKwbD3xlw9rvH3CHYkDFU:NAImkcZ7YLyTOM3x+5H3C

Score
6/10
persistence

Malware Config

Targets

    • Target

      fa5eb5f3fd902b8d965c7a47ee7637eb1ac19932d8cc1f85bfbc8b748ea0cd48

    • Size

      444KB

    • MD5

      fc6169d63790736c07e97d730adea3a7

    • SHA1

      76707755af00f40ee722deafae6761ba8f5150b8

    • SHA256

      fa5eb5f3fd902b8d965c7a47ee7637eb1ac19932d8cc1f85bfbc8b748ea0cd48

    • SHA512

      53bb5c67e3111560beba4e0f880328536de73341371686b45fc1efef7859877a898ed90841b016639fbe783c3b37d2a4d0dc8769a59d07e860d203e3f7ecf2cb

    • SSDEEP

      12288:0WAIaYUk3MZES/IVR2GygQDKwbD3xlw9rvH3CHYkDFU:NAImkcZ7YLyTOM3x+5H3C

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks