Overview

overview

8

Static

static

5761d79919...40.exe

windows7-x64

8

5761d79919...40.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5761d79919bca8e088c362056f00f8a53b5d79e4a0b8faff8a02a5a543ee4040

  • Size

    840KB

  • Sample

    221128-e2yjeaee87

  • MD5

    de8a8d028777dcc6cf4dc6a564e293e2

  • SHA1

    07eccc6c01f37f0dc06ababfcd6b97aab3cbecc5

  • SHA256

    5761d79919bca8e088c362056f00f8a53b5d79e4a0b8faff8a02a5a543ee4040

  • SHA512

    19cab09123b770399f07f01b9ebc6e0ead45798a21e41be17f3b4b5436ec347d7f49d13878615f1148b4041a1d86fd9fe5facb604bbdb785b339992e99830b32

  • SSDEEP

    12288:8W+pDu9YrDQKiXEfiVzhY1Iys0P9ckMveteqNe0LaVpcobAD7:8b0sDNiUfiPgI91kMveYHlSo8D7

Score
8/10
persistence

Malware Config

Targets

    • Target

      5761d79919bca8e088c362056f00f8a53b5d79e4a0b8faff8a02a5a543ee4040

    • Size

      840KB

    • MD5

      de8a8d028777dcc6cf4dc6a564e293e2

    • SHA1

      07eccc6c01f37f0dc06ababfcd6b97aab3cbecc5

    • SHA256

      5761d79919bca8e088c362056f00f8a53b5d79e4a0b8faff8a02a5a543ee4040

    • SHA512

      19cab09123b770399f07f01b9ebc6e0ead45798a21e41be17f3b4b5436ec347d7f49d13878615f1148b4041a1d86fd9fe5facb604bbdb785b339992e99830b32

    • SSDEEP

      12288:8W+pDu9YrDQKiXEfiVzhY1Iys0P9ckMveteqNe0LaVpcobAD7:8b0sDNiUfiPgI91kMveYHlSo8D7

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks