Overview

overview

8

Static

static

b0bbb21bd2...39.exe

windows7-x64

8

b0bbb21bd2...39.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039

  • Size

    300KB

  • Sample

    221127-y1nscsba2z

  • MD5

    472edb1d1f5a25434e3c333600652aa8

  • SHA1

    9a7e707ddd75bb0ca135f39d8d4869a0471a47e1

  • SHA256

    b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039

  • SHA512

    32bad60dba688d958ffc4d90a9473f3787dc6243856668f1440554bf18ad025e521c945d0c21aa9948116484dc81836e78b89adfb97193fe52520794103fc6ad

  • SSDEEP

    6144:fFWnPekevsoKmOz/KURShu5flMy16wL+kCfjLwcfqMr/JWAsoYKZX0:MZSlKJK8991LikCfjLziuG

Score
8/10
persistence

Malware Config

Targets

    • Target

      b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039

    • Size

      300KB

    • MD5

      472edb1d1f5a25434e3c333600652aa8

    • SHA1

      9a7e707ddd75bb0ca135f39d8d4869a0471a47e1

    • SHA256

      b0bbb21bd252c54f18ef8c1ab13485efa7b1d20735477b007bf7ab4c96dbe039

    • SHA512

      32bad60dba688d958ffc4d90a9473f3787dc6243856668f1440554bf18ad025e521c945d0c21aa9948116484dc81836e78b89adfb97193fe52520794103fc6ad

    • SSDEEP

      6144:fFWnPekevsoKmOz/KURShu5flMy16wL+kCfjLwcfqMr/JWAsoYKZX0:MZSlKJK8991LikCfjLziuG

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks