Overview

overview

8

Static

static

c0183be57a...bf.exe

windows7-x64

8

c0183be57a...bf.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0183be57abd9a16727506a55f03db0dab97478c29333dfad9715fe46ae784bf

  • Size

    124KB

  • Sample

    221201-kqhayafe2w

  • MD5

    6318ca8be2bd7cff4b9581ce6b6ecbb4

  • SHA1

    aabadbb60bc3793b135a8013de4fe9bfe20726a8

  • SHA256

    c0183be57abd9a16727506a55f03db0dab97478c29333dfad9715fe46ae784bf

  • SHA512

    b1bc8b8b4c04c50cfa7f07ba576c73a661fde720f2ec8dc71475166c8b1b27f8a6f3a448e6f5c6acd45c690024fd80314e8b7c0c18cca9baf4648fd049e1d234

  • SSDEEP

    3072:0kW/yn650u4Bb7wTpIa5szgo3SJzPn3d8x+/Jo:nK4Bb7sIa+FCJzPt8xi

Score
8/10
persistence

Malware Config

Targets

    • Target

      c0183be57abd9a16727506a55f03db0dab97478c29333dfad9715fe46ae784bf

    • Size

      124KB

    • MD5

      6318ca8be2bd7cff4b9581ce6b6ecbb4

    • SHA1

      aabadbb60bc3793b135a8013de4fe9bfe20726a8

    • SHA256

      c0183be57abd9a16727506a55f03db0dab97478c29333dfad9715fe46ae784bf

    • SHA512

      b1bc8b8b4c04c50cfa7f07ba576c73a661fde720f2ec8dc71475166c8b1b27f8a6f3a448e6f5c6acd45c690024fd80314e8b7c0c18cca9baf4648fd049e1d234

    • SSDEEP

      3072:0kW/yn650u4Bb7wTpIa5szgo3SJzPn3d8x+/Jo:nK4Bb7sIa+FCJzPt8xi

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks