Overview

overview

8

Static

static

9d0693125e...de.exe

windows7-x64

8

9d0693125e...de.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d0693125ea4061bfaaf8f1397c0684e26f5c640d33b5756f8da41c17fcfbfde

  • Size

    296KB

  • Sample

    221128-elnz2adc39

  • MD5

    ec47b06566fec015cd97dc672e63c085

  • SHA1

    17624282101edd72001b01f5876955d638349ef1

  • SHA256

    9d0693125ea4061bfaaf8f1397c0684e26f5c640d33b5756f8da41c17fcfbfde

  • SHA512

    5ede082f19c421d1e8153423638ee4a589c71769ea9a6737ff773f2b9d2011602200a055595d6e92ce96d59be1c5a3cffb453eb6f0b924fc4d91cb021063d52d

  • SSDEEP

    6144:hVeH4vk+OzUCm1bP68Tpi6rJSuJul2H6A4ALAK05GiJ:XeH4+zUCs9i6NSuBaAlxniJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      9d0693125ea4061bfaaf8f1397c0684e26f5c640d33b5756f8da41c17fcfbfde

    • Size

      296KB

    • MD5

      ec47b06566fec015cd97dc672e63c085

    • SHA1

      17624282101edd72001b01f5876955d638349ef1

    • SHA256

      9d0693125ea4061bfaaf8f1397c0684e26f5c640d33b5756f8da41c17fcfbfde

    • SHA512

      5ede082f19c421d1e8153423638ee4a589c71769ea9a6737ff773f2b9d2011602200a055595d6e92ce96d59be1c5a3cffb453eb6f0b924fc4d91cb021063d52d

    • SSDEEP

      6144:hVeH4vk+OzUCm1bP68Tpi6rJSuJul2H6A4ALAK05GiJ:XeH4+zUCs9i6NSuBaAlxniJ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks