Overview

overview

10

Static

static

9183fe9c3b...49.exe

windows7-x64

10

9183fe9c3b...49.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9183fe9c3bec5f0c7288314525c767ad940e8a3321c81b644fe0e740958fb349

  • Size

    114KB

  • Sample

    221129-f4sllsdb4v

  • MD5

    e412d73256fd0854d25aede43c78a1c0

  • SHA1

    58cc355a4ec8feb598b43ddcf7dcdce891619560

  • SHA256

    9183fe9c3bec5f0c7288314525c767ad940e8a3321c81b644fe0e740958fb349

  • SHA512

    c1c972fa674f5f343dc85ed1a6df2941edd8bc765636033f6bb403c811ae63f8e551e3c1c0975eb0eb1e8caa2cca4d8adca8d6d7629a4e372a89b662ed3944e6

  • SSDEEP

    3072:NG/5HgagDoRe1v6JDwHe4xukB+2z4y3ftZNTXkO:wAaaoReWULx75PlIO

Score
10/10
evasion

Malware Config

Targets

    • Target

      9183fe9c3bec5f0c7288314525c767ad940e8a3321c81b644fe0e740958fb349

    • Size

      114KB

    • MD5

      e412d73256fd0854d25aede43c78a1c0

    • SHA1

      58cc355a4ec8feb598b43ddcf7dcdce891619560

    • SHA256

      9183fe9c3bec5f0c7288314525c767ad940e8a3321c81b644fe0e740958fb349

    • SHA512

      c1c972fa674f5f343dc85ed1a6df2941edd8bc765636033f6bb403c811ae63f8e551e3c1c0975eb0eb1e8caa2cca4d8adca8d6d7629a4e372a89b662ed3944e6

    • SSDEEP

      3072:NG/5HgagDoRe1v6JDwHe4xukB+2z4y3ftZNTXkO:wAaaoReWULx75PlIO

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks