Overview

overview

8

Static

static

e48add3a9d...e9.exe

windows7-x64

8

e48add3a9d...e9.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e48add3a9dca4d609c735d3c2c6c9a98c31cfe5892f455b7744904037e1ccfe9

  • Size

    246KB

  • Sample

    221201-t3916abf3s

  • MD5

    14e27b5cef1d19cfb43f16ddc4dc0276

  • SHA1

    5c95b2fd02db9f2054e77fc01f7ebe00f5edb6ae

  • SHA256

    e48add3a9dca4d609c735d3c2c6c9a98c31cfe5892f455b7744904037e1ccfe9

  • SHA512

    e7081996dbfdbf5696b6b32c8858804fed106ded03662e974a14ea9f6e72f0c81cdd10f0f32bbf4cfe5cdecf0ca221bf5f95cea56dfe8244f8e8eaf564868df6

  • SSDEEP

    3072:SpORsHfCMAN2Xl/At+KT6gAxeB6lQyuQGel7q1pS/3a45+C+iwQw0:+gSf6YV/IOgAEQOF31EaSh+iXh

Score
8/10
persistence

Malware Config

Targets

    • Target

      e48add3a9dca4d609c735d3c2c6c9a98c31cfe5892f455b7744904037e1ccfe9

    • Size

      246KB

    • MD5

      14e27b5cef1d19cfb43f16ddc4dc0276

    • SHA1

      5c95b2fd02db9f2054e77fc01f7ebe00f5edb6ae

    • SHA256

      e48add3a9dca4d609c735d3c2c6c9a98c31cfe5892f455b7744904037e1ccfe9

    • SHA512

      e7081996dbfdbf5696b6b32c8858804fed106ded03662e974a14ea9f6e72f0c81cdd10f0f32bbf4cfe5cdecf0ca221bf5f95cea56dfe8244f8e8eaf564868df6

    • SSDEEP

      3072:SpORsHfCMAN2Xl/At+KT6gAxeB6lQyuQGel7q1pS/3a45+C+iwQw0:+gSf6YV/IOgAEQOF31EaSh+iXh

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks