Overview

overview

10

Static

static

0b8d380e9f...4b.exe

windows7-x64

10

0b8d380e9f...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b8d380e9ff7c2cdd17b4e95d6663d1b21db1c955b0c933d68bd66c9c8b1b74b

  • Size

    981KB

  • Sample

    221128-hamjlscd93

  • MD5

    6c7bb74133fa4462f030de13415108d1

  • SHA1

    61f2bc88935451f0525ccd9e2dba7ff00a3f641b

  • SHA256

    0b8d380e9ff7c2cdd17b4e95d6663d1b21db1c955b0c933d68bd66c9c8b1b74b

  • SHA512

    534aff749eda841c6d28c770b8a2b562e7c2021453976edf5e97e4ac29dfcdafe857ae11fbcf6c06dba5a38ed3feceee24a75901a925ca06eb03a7d8000392b1

  • SSDEEP

    12288:rVTvRaeKGlHiM4lKD13YxWnVZunCAEJYQHxw88o8786sfRJ/kkkkckkkkbkkkhkh:tvbvlZVRhnbVAEa1YfJi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0b8d380e9ff7c2cdd17b4e95d6663d1b21db1c955b0c933d68bd66c9c8b1b74b

    • Size

      981KB

    • MD5

      6c7bb74133fa4462f030de13415108d1

    • SHA1

      61f2bc88935451f0525ccd9e2dba7ff00a3f641b

    • SHA256

      0b8d380e9ff7c2cdd17b4e95d6663d1b21db1c955b0c933d68bd66c9c8b1b74b

    • SHA512

      534aff749eda841c6d28c770b8a2b562e7c2021453976edf5e97e4ac29dfcdafe857ae11fbcf6c06dba5a38ed3feceee24a75901a925ca06eb03a7d8000392b1

    • SSDEEP

      12288:rVTvRaeKGlHiM4lKD13YxWnVZunCAEJYQHxw88o8786sfRJ/kkkkckkkkbkkkhkh:tvbvlZVRhnbVAEa1YfJi

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks