Overview

overview

8

Static

static

74ee5c3d45...4f.exe

windows7-x64

8

74ee5c3d45...4f.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74ee5c3d4522602d2537d902875d706cda37fdfc41b53a4e20e494d5b3f6504f

  • Size

    322KB

  • Sample

    221201-dpf8xsdc6y

  • MD5

    6c78a972994cc61b642f870ff9239c28

  • SHA1

    67e15a2e9084165b5dee5d3a31abb35a01d6a3ce

  • SHA256

    74ee5c3d4522602d2537d902875d706cda37fdfc41b53a4e20e494d5b3f6504f

  • SHA512

    4ce2e245a9388d6dab824874edc61a6fa8d2b6758b26810d6b1852fb71ed4109a99d8b530cd3dfb5db83eaccdda9bf80c5e344203f9d3649b6ef22ee6ce6539c

  • SSDEEP

    6144:VJgJqLRdtwj7Cx9CfmXyKN3Or7PigcAkfTGHsOE9G/2yEuaIrouctmz:3SyRw+9CfmXyKBOXYAwTXO0zuaIrour

Score
8/10
persistence

Malware Config

Targets

    • Target

      74ee5c3d4522602d2537d902875d706cda37fdfc41b53a4e20e494d5b3f6504f

    • Size

      322KB

    • MD5

      6c78a972994cc61b642f870ff9239c28

    • SHA1

      67e15a2e9084165b5dee5d3a31abb35a01d6a3ce

    • SHA256

      74ee5c3d4522602d2537d902875d706cda37fdfc41b53a4e20e494d5b3f6504f

    • SHA512

      4ce2e245a9388d6dab824874edc61a6fa8d2b6758b26810d6b1852fb71ed4109a99d8b530cd3dfb5db83eaccdda9bf80c5e344203f9d3649b6ef22ee6ce6539c

    • SSDEEP

      6144:VJgJqLRdtwj7Cx9CfmXyKN3Or7PigcAkfTGHsOE9G/2yEuaIrouctmz:3SyRw+9CfmXyKBOXYAwTXO0zuaIrour

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks