Overview

overview

8

Static

static

9cddcaf749...c9.exe

windows7-x64

8

9cddcaf749...c9.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    9cddcaf749612ebb51e6d0d89ec8809b918ecabd879f9f8bedb61deba54ab4c9

  • Size

    188KB

  • Sample

    221201-avfmsshc22

  • MD5

    7d86378363873f8407d57a33eb9e6286

  • SHA1

    54bc85e50ef9911881a84dddd6bb790fac7ee3f5

  • SHA256

    9cddcaf749612ebb51e6d0d89ec8809b918ecabd879f9f8bedb61deba54ab4c9

  • SHA512

    37c8f1c17d5235f1ca72e20d161a71f062416c83669c5038fb90ed272a1487c75bee752d8ec90d5f5b570fa935885ad4ba07d815f7ec8641530f3518416d7280

  • SSDEEP

    3072:9bOoRdeIj4VJby2sALRBtoU8W5Hg1neD2XxNfoyA4SD9edV6p6wotWSjzlR+05j:9qoR8OqRBiM5HgFeCXxNfoSSD9ebwoWK

Score
8/10
persistence

Malware Config

Targets

    • Target

      9cddcaf749612ebb51e6d0d89ec8809b918ecabd879f9f8bedb61deba54ab4c9

    • Size

      188KB

    • MD5

      7d86378363873f8407d57a33eb9e6286

    • SHA1

      54bc85e50ef9911881a84dddd6bb790fac7ee3f5

    • SHA256

      9cddcaf749612ebb51e6d0d89ec8809b918ecabd879f9f8bedb61deba54ab4c9

    • SHA512

      37c8f1c17d5235f1ca72e20d161a71f062416c83669c5038fb90ed272a1487c75bee752d8ec90d5f5b570fa935885ad4ba07d815f7ec8641530f3518416d7280

    • SSDEEP

      3072:9bOoRdeIj4VJby2sALRBtoU8W5Hg1neD2XxNfoyA4SD9edV6p6wotWSjzlR+05j:9qoR8OqRBiM5HgFeCXxNfoSSD9ebwoWK

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks