Overview

overview

8

Static

static

370ef67297...96.exe

windows7-x64

8

370ef67297...96.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    370ef67297c8f9970b5a047f8a87657f7ef241c412418f6fbc62606a02adca96

  • Size

    138KB

  • Sample

    221127-ym4xesaa2z

  • MD5

    81e6d8cf061d33ae7ac322ddfbfba4e6

  • SHA1

    80be0c243c740848515e5e7be7866c2e18e4fce5

  • SHA256

    370ef67297c8f9970b5a047f8a87657f7ef241c412418f6fbc62606a02adca96

  • SHA512

    eeea80a071b8b6891f172f4e1894e0ca3cf10d30f8475b055c632c18b6a55a18fabab0b0158b49ad192266bb841d65347266e4c174e3729e7715ec4b40bbc0c1

  • SSDEEP

    3072:KT/x50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1v3wQG1:KT/oGtmiYlW4A1QvGXjBoQG1

Score
8/10
persistence

Malware Config

Targets

    • Target

      370ef67297c8f9970b5a047f8a87657f7ef241c412418f6fbc62606a02adca96

    • Size

      138KB

    • MD5

      81e6d8cf061d33ae7ac322ddfbfba4e6

    • SHA1

      80be0c243c740848515e5e7be7866c2e18e4fce5

    • SHA256

      370ef67297c8f9970b5a047f8a87657f7ef241c412418f6fbc62606a02adca96

    • SHA512

      eeea80a071b8b6891f172f4e1894e0ca3cf10d30f8475b055c632c18b6a55a18fabab0b0158b49ad192266bb841d65347266e4c174e3729e7715ec4b40bbc0c1

    • SSDEEP

      3072:KT/x50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1v3wQG1:KT/oGtmiYlW4A1QvGXjBoQG1

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks