Overview

overview

10

Static

static

59b79188aa...63.exe

windows7-x64

10

59b79188aa...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59b79188aaec8fada1bbac62c158639c96db8a6944dd532300cb8dcfa774ce63

  • Size

    581KB

  • Sample

    221201-fjfrbaag71

  • MD5

    b29698ea1e1af38d1b611f627e7aa237

  • SHA1

    8341dc63396634f4f1cc4ab70572bbc6dd71d3b7

  • SHA256

    59b79188aaec8fada1bbac62c158639c96db8a6944dd532300cb8dcfa774ce63

  • SHA512

    e84f9c8f491cdd7947e3adaeba8e0b3b5b00fa5602e236831f10c7b0231a746a436621019367bbd2cf340da4599f223a8449589c21894fdc6a7208a634cca188

  • SSDEEP

    12288:VJo2LeWDHNWqsSMk7Um1wkKRO9RF7ytjALmd:PPLH0f3cUm1ViYqh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      59b79188aaec8fada1bbac62c158639c96db8a6944dd532300cb8dcfa774ce63

    • Size

      581KB

    • MD5

      b29698ea1e1af38d1b611f627e7aa237

    • SHA1

      8341dc63396634f4f1cc4ab70572bbc6dd71d3b7

    • SHA256

      59b79188aaec8fada1bbac62c158639c96db8a6944dd532300cb8dcfa774ce63

    • SHA512

      e84f9c8f491cdd7947e3adaeba8e0b3b5b00fa5602e236831f10c7b0231a746a436621019367bbd2cf340da4599f223a8449589c21894fdc6a7208a634cca188

    • SSDEEP

      12288:VJo2LeWDHNWqsSMk7Um1wkKRO9RF7ytjALmd:PPLH0f3cUm1ViYqh

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks