Overview

overview

8

Static

static

17d50f2a10...34.exe

windows7-x64

8

17d50f2a10...34.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    17d50f2a10ad166bdf18faefcead14211f738f71b2ab777296b6cb0f72cada34

  • Size

    429KB

  • Sample

    221129-mpws2seb51

  • MD5

    7fc7a09524a8569c3ad1069546b30c8f

  • SHA1

    50d4952c98da345de3746eda9ae2a7ee4e7d0fe3

  • SHA256

    17d50f2a10ad166bdf18faefcead14211f738f71b2ab777296b6cb0f72cada34

  • SHA512

    925984278ef3f82bc65d8918422762895f6d349622ecb942f3140e8dcfe816d410e2c72eb413b498624211a54476d46ba83679ceed361b317833a9ccc02a1f64

  • SSDEEP

    12288:oucxVT7MoXLZzrSGFVaraq7wvMrdrsnzuGPhMHLNWjI:W3Zzva2q7wnzug2Hb

Score
8/10
persistence

Malware Config

Targets

    • Target

      17d50f2a10ad166bdf18faefcead14211f738f71b2ab777296b6cb0f72cada34

    • Size

      429KB

    • MD5

      7fc7a09524a8569c3ad1069546b30c8f

    • SHA1

      50d4952c98da345de3746eda9ae2a7ee4e7d0fe3

    • SHA256

      17d50f2a10ad166bdf18faefcead14211f738f71b2ab777296b6cb0f72cada34

    • SHA512

      925984278ef3f82bc65d8918422762895f6d349622ecb942f3140e8dcfe816d410e2c72eb413b498624211a54476d46ba83679ceed361b317833a9ccc02a1f64

    • SSDEEP

      12288:oucxVT7MoXLZzrSGFVaraq7wvMrdrsnzuGPhMHLNWjI:W3Zzva2q7wnzug2Hb

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks