Overview

overview

8

Static

static

6eac0cad71...fc.exe

windows7-x64

8

6eac0cad71...fc.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    6eac0cad71aebba2a46b7734e640959de34ffae313dda8070f39c04f0b41bcfc

  • Size

    267KB

  • Sample

    221201-d169gsec5t

  • MD5

    20f88d3496d71ef84f2740dd259d1230

  • SHA1

    61ffcb7ff11674bd3ebcf4cc851937368f593962

  • SHA256

    6eac0cad71aebba2a46b7734e640959de34ffae313dda8070f39c04f0b41bcfc

  • SHA512

    728595bc36021dc2efa3e9af6baafad3a931788619ff3a3baec8579a3bab37e8b8a41a27dc5b8c93bff3db1ea6d7021ff50a0b4f967f99a1d99b10504ddacbef

  • SSDEEP

    6144:KxZaZv4LXXKxYwXBuGC0eAxtPv2LX3mjXCpw3td5KClEB:KMGOBIUxl23mjypw3xxEB

Score
8/10
persistence

Malware Config

Targets

    • Target

      6eac0cad71aebba2a46b7734e640959de34ffae313dda8070f39c04f0b41bcfc

    • Size

      267KB

    • MD5

      20f88d3496d71ef84f2740dd259d1230

    • SHA1

      61ffcb7ff11674bd3ebcf4cc851937368f593962

    • SHA256

      6eac0cad71aebba2a46b7734e640959de34ffae313dda8070f39c04f0b41bcfc

    • SHA512

      728595bc36021dc2efa3e9af6baafad3a931788619ff3a3baec8579a3bab37e8b8a41a27dc5b8c93bff3db1ea6d7021ff50a0b4f967f99a1d99b10504ddacbef

    • SSDEEP

      6144:KxZaZv4LXXKxYwXBuGC0eAxtPv2LX3mjXCpw3td5KClEB:KMGOBIUxl23mjypw3xxEB

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks