Overview

overview

7

Static

static

rechnungon...27.exe

windows7-x64

7

rechnungon...27.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c5c605870736cabd926363f70aad0d6e21e73d0740c9c59664111884c341eb8

  • Size

    122KB

  • Sample

    221127-tq712aef3s

  • MD5

    8420fa7769f270bf0aca3e50189a5701

  • SHA1

    02161da14e8f8c61a9f45162cac81e0676424dab

  • SHA256

    3c5c605870736cabd926363f70aad0d6e21e73d0740c9c59664111884c341eb8

  • SHA512

    16406708dbeca43d8e3b7a81f3be9469a4166869599bea239805c9427306c8496191d52d71610e347e9e192010bc4263d464a83eb671071435a963b70b75a281

  • SSDEEP

    1536:2NlKKfN+v24TUZvp5YSszLL+pxZySA7HMGRU4e3swOE/7f76qG0Trf3lk34NbVOi:2NR4Ta52LLmZyT7HMKVe76qr9mrm

Score
7/10
persistence

Malware Config

Targets

    • Target

      rechnungonline_telekom_000002920019_2014_11_43726700032_de_003938289_027.exe

    • Size

      172KB

    • MD5

      86a0f3a5a1b658da0b5a20350194be50

    • SHA1

      7cfc8ca77840edde4dec7044a1d3a95e052065a8

    • SHA256

      0dd2c369816a22c313067349a91f96770702abb0324b57445ee1e2dc535b3765

    • SHA512

      acc3dd0ea21347764c2deb12ccf81661d6cbfff02e78996a0beb5bbaa4eb4650e449ff79efd6ee362dc8d579282868cfb4a2f5d6915a09f9028073944f57f225

    • SSDEEP

      3072:z4X1iceabPJuZjbvpX2LLmZyT7HMoVe76qrbwuG:0FitjTpX2LaLos75H

    Score
    7/10
    persistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks