Overview

overview

8

Static

static

1f301df87b...a5.exe

windows7-x64

8

1f301df87b...a5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1f301df87ba0f7cfb6bf5848348cf942f2e9e72208ae9ac142dbbd33993e65a5

  • Size

    173KB

  • Sample

    221201-g3y8fafd4v

  • MD5

    8f419521f44fb75411e1ba1df12d8260

  • SHA1

    d07979c149e1bce577977ec674304c069acbbac1

  • SHA256

    1f301df87ba0f7cfb6bf5848348cf942f2e9e72208ae9ac142dbbd33993e65a5

  • SHA512

    825ea3a91a2de8f6ee2697b806b139f4885d3e842bf2e3d16363735abf6eebe574ceb6df755a40057894d9958d5c20273d56a74b04b2700e2321b5e372f6be20

  • SSDEEP

    1536:gkWbhgW5o1oS4l1TfG8Umu3/IdsGmPIxl8F4L0a8fcqWxepCAh2qpyDCyZdBDbbo:FW+1oS4l5OeuQdrmwvL8EqphXq9N8

Score
8/10
persistence

Malware Config

Targets

    • Target

      1f301df87ba0f7cfb6bf5848348cf942f2e9e72208ae9ac142dbbd33993e65a5

    • Size

      173KB

    • MD5

      8f419521f44fb75411e1ba1df12d8260

    • SHA1

      d07979c149e1bce577977ec674304c069acbbac1

    • SHA256

      1f301df87ba0f7cfb6bf5848348cf942f2e9e72208ae9ac142dbbd33993e65a5

    • SHA512

      825ea3a91a2de8f6ee2697b806b139f4885d3e842bf2e3d16363735abf6eebe574ceb6df755a40057894d9958d5c20273d56a74b04b2700e2321b5e372f6be20

    • SSDEEP

      1536:gkWbhgW5o1oS4l1TfG8Umu3/IdsGmPIxl8F4L0a8fcqWxepCAh2qpyDCyZdBDbbo:FW+1oS4l5OeuQdrmwvL8EqphXq9N8

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Blocklisted process makes network request

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks