Overview

overview

6

Static

static

ff616007ff...77.exe

windows7-x64

6

ff616007ff...77.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff616007ffeac2a32d668d60a55b910aa96482aec5b2467a22c8fe4bd97fbc77

  • Size

    168KB

  • Sample

    221127-r9qvraeh96

  • MD5

    bed4379a7458d592646ada7f0e196eed

  • SHA1

    eb6aca94c9bd172ba13e2adab66ae775ef4915ed

  • SHA256

    ff616007ffeac2a32d668d60a55b910aa96482aec5b2467a22c8fe4bd97fbc77

  • SHA512

    c279a95188815032db6bb9a30c9f03aadee55ed0fbc9bd9b5ea04ed7a9a8b0bd7ed14d43e04d63f54ca3a56ed0aaa50d0440e89aa20061b2033e5a1553556343

  • SSDEEP

    3072:fJmGKP0BiaynVZsMvzxaSNDUtGl6YwtCvndsbrnFfitLr:01P0BfqzxvwGl9wtqErniLr

Score
6/10
persistence

Malware Config

Targets

    • Target

      ff616007ffeac2a32d668d60a55b910aa96482aec5b2467a22c8fe4bd97fbc77

    • Size

      168KB

    • MD5

      bed4379a7458d592646ada7f0e196eed

    • SHA1

      eb6aca94c9bd172ba13e2adab66ae775ef4915ed

    • SHA256

      ff616007ffeac2a32d668d60a55b910aa96482aec5b2467a22c8fe4bd97fbc77

    • SHA512

      c279a95188815032db6bb9a30c9f03aadee55ed0fbc9bd9b5ea04ed7a9a8b0bd7ed14d43e04d63f54ca3a56ed0aaa50d0440e89aa20061b2033e5a1553556343

    • SSDEEP

      3072:fJmGKP0BiaynVZsMvzxaSNDUtGl6YwtCvndsbrnFfitLr:01P0BfqzxvwGl9wtqErniLr

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks