Overview

overview

8

Static

static

f14d691282...fa.exe

windows7-x64

8

f14d691282...fa.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f14d6912821d36a3e5cfce5f1fcc06d74c9d29a4390f4eeaa519392c729920fa

  • Size

    131KB

  • Sample

    221129-gzaexacg38

  • MD5

    83eaa431660cf91586d308c52aa75c50

  • SHA1

    3ae3f415eab6927727bedb087ece82eb3c0abd5b

  • SHA256

    f14d6912821d36a3e5cfce5f1fcc06d74c9d29a4390f4eeaa519392c729920fa

  • SHA512

    de6010a696fa9f717465a17ea430200f5bf45764a58b3d16831006fa454e591de5b89fe4f922fe5e7548c2a0800c8af718b566a37344ddbf8fc2d1a491b5a6dd

  • SSDEEP

    1536:8haN2fh0+TTQInoWGJcJJleqt1+Wgx3lFnHmleHSWgLAyXnnLm+Anq+cHq:2++TFnoWTTYBB1hHgN1Anq+Oq

Score
8/10
persistence

Malware Config

Targets

    • Target

      f14d6912821d36a3e5cfce5f1fcc06d74c9d29a4390f4eeaa519392c729920fa

    • Size

      131KB

    • MD5

      83eaa431660cf91586d308c52aa75c50

    • SHA1

      3ae3f415eab6927727bedb087ece82eb3c0abd5b

    • SHA256

      f14d6912821d36a3e5cfce5f1fcc06d74c9d29a4390f4eeaa519392c729920fa

    • SHA512

      de6010a696fa9f717465a17ea430200f5bf45764a58b3d16831006fa454e591de5b89fe4f922fe5e7548c2a0800c8af718b566a37344ddbf8fc2d1a491b5a6dd

    • SSDEEP

      1536:8haN2fh0+TTQInoWGJcJJleqt1+Wgx3lFnHmleHSWgLAyXnnLm+Anq+cHq:2++TFnoWTTYBB1hHgN1Anq+Oq

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks