Overview

overview

10

Static

static

a777ee2935...ed.exe

windows7-x64

10

a777ee2935...ed.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a777ee2935835d35e2b48cdf0a81c463738ecfe5451c3668e3ad55e8032e83ed

  • Size

    178KB

  • Sample

    221130-3tdq2afe43

  • MD5

    7ad0092b015841d09e7f22c607c1b976

  • SHA1

    bd02c3201404b4fd2132cc92df294edef138b110

  • SHA256

    a777ee2935835d35e2b48cdf0a81c463738ecfe5451c3668e3ad55e8032e83ed

  • SHA512

    3f5a3bcba8c202c8a00701b011f3768e64cd7ce36f63d83ecc6af968ad4337ee4a570819e22204a5fcdfb111217611cbd301054f1d64d298d9ed46743850000a

  • SSDEEP

    3072:R39V8DNGemhyHJMWubSYNw75rs/qbkpkJGfeH3Vs71wBy02Z0WJPfiW:bV8vMWUtgtjJGc6CJ2JyW

Score
10/10
evasion

Malware Config

Targets

    • Target

      a777ee2935835d35e2b48cdf0a81c463738ecfe5451c3668e3ad55e8032e83ed

    • Size

      178KB

    • MD5

      7ad0092b015841d09e7f22c607c1b976

    • SHA1

      bd02c3201404b4fd2132cc92df294edef138b110

    • SHA256

      a777ee2935835d35e2b48cdf0a81c463738ecfe5451c3668e3ad55e8032e83ed

    • SHA512

      3f5a3bcba8c202c8a00701b011f3768e64cd7ce36f63d83ecc6af968ad4337ee4a570819e22204a5fcdfb111217611cbd301054f1d64d298d9ed46743850000a

    • SSDEEP

      3072:R39V8DNGemhyHJMWubSYNw75rs/qbkpkJGfeH3Vs71wBy02Z0WJPfiW:bV8vMWUtgtjJGc6CJ2JyW

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks