Overview

overview

8

Static

static

0f646ac61f...cc.exe

windows7-x64

8

0f646ac61f...cc.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f646ac61f47075c5fe30f039d362e921b004bdf25e98eb4a5f1ea5a2cda5dcc

  • Size

    301KB

  • Sample

    221201-hfbz3age4t

  • MD5

    7d1f8859f165468f337895ebea375f04

  • SHA1

    4e517846d6b8ed4e2062f56c8fb254d28fab2369

  • SHA256

    0f646ac61f47075c5fe30f039d362e921b004bdf25e98eb4a5f1ea5a2cda5dcc

  • SHA512

    089a869353b3fab91c109025c2a0330aaa32024b70850328eed52bd10be5c338fab28815d5fef1c40d32c832aa27619939758c1034efd055a2ade6522608df6b

  • SSDEEP

    6144:9oVPodsmLG3Vh51nFqswyFx04MNr6sbC7bchx1Sz0:9oxgsjVh5OTyF64k+sTz

Score
8/10
persistence

Malware Config

Targets

    • Target

      0f646ac61f47075c5fe30f039d362e921b004bdf25e98eb4a5f1ea5a2cda5dcc

    • Size

      301KB

    • MD5

      7d1f8859f165468f337895ebea375f04

    • SHA1

      4e517846d6b8ed4e2062f56c8fb254d28fab2369

    • SHA256

      0f646ac61f47075c5fe30f039d362e921b004bdf25e98eb4a5f1ea5a2cda5dcc

    • SHA512

      089a869353b3fab91c109025c2a0330aaa32024b70850328eed52bd10be5c338fab28815d5fef1c40d32c832aa27619939758c1034efd055a2ade6522608df6b

    • SSDEEP

      6144:9oVPodsmLG3Vh51nFqswyFx04MNr6sbC7bchx1Sz0:9oxgsjVh5OTyF64k+sTz

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks