Overview

overview

10

Static

static

ee661dd8e1...c4.exe

windows7-x64

8

ee661dd8e1...c4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee661dd8e13b6039457221c08dceb15576f9d6b4e99dc173b5ab32c7a1538cc4

  • Size

    361KB

  • Sample

    221129-r5616scf6v

  • MD5

    49f5bef87fc96acfded2371efc06fec6

  • SHA1

    2ba93a292f4fe3f0f2b3da3a7ba46e45b509b3bd

  • SHA256

    ee661dd8e13b6039457221c08dceb15576f9d6b4e99dc173b5ab32c7a1538cc4

  • SHA512

    4d15f106d5e16652398448881c3582be8bf01cdffb99daa0818dc6cf70426f1fc844b7c81cc8454a95eb569a5862e8505e5c2d5f2ded6577dd3f0f11348d2ad8

  • SSDEEP

    6144:pflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:pflfAsiVGjSGecvX

Score
10/10

Malware Config

Targets

    • Target

      ee661dd8e13b6039457221c08dceb15576f9d6b4e99dc173b5ab32c7a1538cc4

    • Size

      361KB

    • MD5

      49f5bef87fc96acfded2371efc06fec6

    • SHA1

      2ba93a292f4fe3f0f2b3da3a7ba46e45b509b3bd

    • SHA256

      ee661dd8e13b6039457221c08dceb15576f9d6b4e99dc173b5ab32c7a1538cc4

    • SHA512

      4d15f106d5e16652398448881c3582be8bf01cdffb99daa0818dc6cf70426f1fc844b7c81cc8454a95eb569a5862e8505e5c2d5f2ded6577dd3f0f11348d2ad8

    • SSDEEP

      6144:pflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:pflfAsiVGjSGecvX

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks