Overview

overview

8

Static

static

5b629e172a...e1.exe

windows7-x64

8

5b629e172a...e1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b629e172ab677105dbd5a6b4fd1571cea846ae2f979a1d40530d8b6a4b244e1

  • Size

    196KB

  • Sample

    221129-ksggesge3s

  • MD5

    130caa46dcff97da4613fc64f31e9a30

  • SHA1

    874370850b192edffe2111818cb1f6f6584cf17b

  • SHA256

    5b629e172ab677105dbd5a6b4fd1571cea846ae2f979a1d40530d8b6a4b244e1

  • SHA512

    ba3ad390890669bd7c67622016af39f4186b33bd40d6df220fc98e4e17b2e52e0437a869662ca47dff1ede3f6005d0df9e1b4de84815773c6e1f127736c777d8

  • SSDEEP

    3072:tXWOYmnDOqTXNg0DtViDZ92tnkGf+M0AviA9fpLljgAXBu/cYGPqM5:MADnhHpwyJhZpJVXBuKyM

Score
8/10
persistence

Malware Config

Targets

    • Target

      5b629e172ab677105dbd5a6b4fd1571cea846ae2f979a1d40530d8b6a4b244e1

    • Size

      196KB

    • MD5

      130caa46dcff97da4613fc64f31e9a30

    • SHA1

      874370850b192edffe2111818cb1f6f6584cf17b

    • SHA256

      5b629e172ab677105dbd5a6b4fd1571cea846ae2f979a1d40530d8b6a4b244e1

    • SHA512

      ba3ad390890669bd7c67622016af39f4186b33bd40d6df220fc98e4e17b2e52e0437a869662ca47dff1ede3f6005d0df9e1b4de84815773c6e1f127736c777d8

    • SSDEEP

      3072:tXWOYmnDOqTXNg0DtViDZ92tnkGf+M0AviA9fpLljgAXBu/cYGPqM5:MADnhHpwyJhZpJVXBuKyM

    Score
    8/10
    persistence

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks