Overview

overview

10

Static

static

85239ae363...3d.exe

windows7-x64

10

85239ae363...3d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    85239ae363ce6192e6fea55d41f894f5b21940b467e1cd5fae3cf03221a4f13d

  • Size

    538KB

  • Sample

    221201-cphajseg57

  • MD5

    6c81233e750908cdbb9c1cd2cf2f356f

  • SHA1

    84cc542e88f50f4b7f2a344caee5ccc55277de3e

  • SHA256

    85239ae363ce6192e6fea55d41f894f5b21940b467e1cd5fae3cf03221a4f13d

  • SHA512

    836bc1aa0712950f625120a2992f75c92702b7caff144eca95970c9e30456fc11292b76715dc554c8c07023570f2da7baf5fc302152e7fd9afc2e68580ada764

  • SSDEEP

    6144:h04aIWPchrTVwmUQLn/L0cXiXnKU+T2Mn6ZfcP8Y+zczo2dtfUAKsbtQmXdcmsXb:Gc1TVnUO0JC6VzKo2dtrKm+xuuQcsDi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      85239ae363ce6192e6fea55d41f894f5b21940b467e1cd5fae3cf03221a4f13d

    • Size

      538KB

    • MD5

      6c81233e750908cdbb9c1cd2cf2f356f

    • SHA1

      84cc542e88f50f4b7f2a344caee5ccc55277de3e

    • SHA256

      85239ae363ce6192e6fea55d41f894f5b21940b467e1cd5fae3cf03221a4f13d

    • SHA512

      836bc1aa0712950f625120a2992f75c92702b7caff144eca95970c9e30456fc11292b76715dc554c8c07023570f2da7baf5fc302152e7fd9afc2e68580ada764

    • SSDEEP

      6144:h04aIWPchrTVwmUQLn/L0cXiXnKU+T2Mn6ZfcP8Y+zczo2dtfUAKsbtQmXdcmsXb:Gc1TVnUO0JC6VzKo2dtrKm+xuuQcsDi

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks