Overview

overview

8

Static

static

61a6d0e75d...33.exe

windows7-x64

8

61a6d0e75d...33.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61a6d0e75d2d894cd63856ae72e66c6f959639bfa9671269a08941ff373f6133

  • Size

    869KB

  • Sample

    221129-qqtlvsda79

  • MD5

    195cb26a1ade61e7148896b2a04f2700

  • SHA1

    852c4d99f680930c81813efa8b950638aa780a6d

  • SHA256

    61a6d0e75d2d894cd63856ae72e66c6f959639bfa9671269a08941ff373f6133

  • SHA512

    e3c09eaba4e28454c939ce669ef3bc1c64d621e487358dc32da59c88115c3a653be52a2af741387e7d00aeb54db8dbd40344b3dac875293634c19f6269db59de

  • SSDEEP

    12288:1uh2K1Dh7sCtRw4hQki2X0btIvl0QYDHk8EhvKhaiysJ/bnE7ZUbghGXf0XduwGU:1Ad73/5jXu2I4HWnbDv0QwG4L

Score
8/10
persistence

Malware Config

Targets

    • Target

      61a6d0e75d2d894cd63856ae72e66c6f959639bfa9671269a08941ff373f6133

    • Size

      869KB

    • MD5

      195cb26a1ade61e7148896b2a04f2700

    • SHA1

      852c4d99f680930c81813efa8b950638aa780a6d

    • SHA256

      61a6d0e75d2d894cd63856ae72e66c6f959639bfa9671269a08941ff373f6133

    • SHA512

      e3c09eaba4e28454c939ce669ef3bc1c64d621e487358dc32da59c88115c3a653be52a2af741387e7d00aeb54db8dbd40344b3dac875293634c19f6269db59de

    • SSDEEP

      12288:1uh2K1Dh7sCtRw4hQki2X0btIvl0QYDHk8EhvKhaiysJ/bnE7ZUbghGXf0XduwGU:1Ad73/5jXu2I4HWnbDv0QwG4L

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks