Overview

overview

8

Static

static

474d484974...89.exe

windows7-x64

8

474d484974...89.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    474d4849745df7ccab63eafc3ba05bd424f7b12bf6241649a969d6266df80289

  • Size

    411KB

  • Sample

    221201-fcpqmsef97

  • MD5

    31ee1b0b19610cf384845dedefb0fd50

  • SHA1

    34468ef865fc387f9f8958dcfb3175898e237b98

  • SHA256

    474d4849745df7ccab63eafc3ba05bd424f7b12bf6241649a969d6266df80289

  • SHA512

    05b45add912f11029aa07cbc025a69de25272643b6e5c133743d3c5946d77fc92d9b99104378c81fae3257171f14a347637dccaa15226d755e1da44a132716e9

  • SSDEEP

    6144:9GK72lHSRh91zW5dlJbCYZ5gFRdbjjkJMAIldkbQ:9pAMlWNlNynXkB4qb

Score
8/10
persistence

Malware Config

Targets

    • Target

      474d4849745df7ccab63eafc3ba05bd424f7b12bf6241649a969d6266df80289

    • Size

      411KB

    • MD5

      31ee1b0b19610cf384845dedefb0fd50

    • SHA1

      34468ef865fc387f9f8958dcfb3175898e237b98

    • SHA256

      474d4849745df7ccab63eafc3ba05bd424f7b12bf6241649a969d6266df80289

    • SHA512

      05b45add912f11029aa07cbc025a69de25272643b6e5c133743d3c5946d77fc92d9b99104378c81fae3257171f14a347637dccaa15226d755e1da44a132716e9

    • SSDEEP

      6144:9GK72lHSRh91zW5dlJbCYZ5gFRdbjjkJMAIldkbQ:9pAMlWNlNynXkB4qb

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks