Overview

overview

8

Static

static

5d40fe274e...3b.exe

windows7-x64

8

5d40fe274e...3b.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d40fe274e8acba14d13483ececb1e7e343a61d3fa021d2c4a0d023b390b253b

  • Size

    308KB

  • Sample

    221127-sfnc7sfe44

  • MD5

    7107d96fb516d1f15e7404702d52f63f

  • SHA1

    2014aa810011d45c0d76df81be2846fa71ed0ff2

  • SHA256

    5d40fe274e8acba14d13483ececb1e7e343a61d3fa021d2c4a0d023b390b253b

  • SHA512

    1f6e2ff39d013fc144fca067cab2bbca24805c11ee4e9b97e9de20fcf1559ed3c7a5bbcc1e0933270275cfc35bfdf3b97d96b903bf729535c3603d8cde92ba3d

  • SSDEEP

    6144:TpUcP+wbqVe0xdDz2N2PENHpwGX7xifrQkO2iZN1ryTgk:TpLJb0ddDNEHws7xerQk1

Score
8/10
persistence

Malware Config

Targets

    • Target

      5d40fe274e8acba14d13483ececb1e7e343a61d3fa021d2c4a0d023b390b253b

    • Size

      308KB

    • MD5

      7107d96fb516d1f15e7404702d52f63f

    • SHA1

      2014aa810011d45c0d76df81be2846fa71ed0ff2

    • SHA256

      5d40fe274e8acba14d13483ececb1e7e343a61d3fa021d2c4a0d023b390b253b

    • SHA512

      1f6e2ff39d013fc144fca067cab2bbca24805c11ee4e9b97e9de20fcf1559ed3c7a5bbcc1e0933270275cfc35bfdf3b97d96b903bf729535c3603d8cde92ba3d

    • SSDEEP

      6144:TpUcP+wbqVe0xdDz2N2PENHpwGX7xifrQkO2iZN1ryTgk:TpLJb0ddDNEHws7xerQk1

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks