Overview

overview

8

Static

static

c97ca9f2c3...e5.exe

windows7-x64

8

c97ca9f2c3...e5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c97ca9f2c3b9a9f7770c669bf0afb0184dc6c53669ff45c92b53ab62d9f7a5e5

  • Size

    66KB

  • Sample

    221201-wcqwpsgc2x

  • MD5

    b99f372ea7abbdcdc98a772f092d05e1

  • SHA1

    837de335e3445fc97cfd609721fca53cb10e31ef

  • SHA256

    c97ca9f2c3b9a9f7770c669bf0afb0184dc6c53669ff45c92b53ab62d9f7a5e5

  • SHA512

    b3cbb510c34cdd0a1dedccac4969a129833d5f05b14d591cc824cf50a6c29a0a34e97df6dd40a09cc97133d20b20d0544c23911d3bc750fe3bc1c7472cbfaf5f

  • SSDEEP

    1536:kbEt26/jLp82dpNikzPQuHuLKxUiRKNCri+EdjyEW7:jT/5PN/i3tQrHEhyEW7

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      c97ca9f2c3b9a9f7770c669bf0afb0184dc6c53669ff45c92b53ab62d9f7a5e5

    • Size

      66KB

    • MD5

      b99f372ea7abbdcdc98a772f092d05e1

    • SHA1

      837de335e3445fc97cfd609721fca53cb10e31ef

    • SHA256

      c97ca9f2c3b9a9f7770c669bf0afb0184dc6c53669ff45c92b53ab62d9f7a5e5

    • SHA512

      b3cbb510c34cdd0a1dedccac4969a129833d5f05b14d591cc824cf50a6c29a0a34e97df6dd40a09cc97133d20b20d0544c23911d3bc750fe3bc1c7472cbfaf5f

    • SSDEEP

      1536:kbEt26/jLp82dpNikzPQuHuLKxUiRKNCri+EdjyEW7:jT/5PN/i3tQrHEhyEW7

    Score
    8/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks