Overview

overview

10

Static

static

d1c78b5df2...63.exe

windows7-x64

8

d1c78b5df2...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1c78b5df2dcf3e34e8ba19aa34eaceb84cb061f013045c0927d798dbccb8763

  • Size

    361KB

  • Sample

    221202-vqq8ysgc33

  • MD5

    aadc98e6eef0bca93eb2d8ceb288d5fd

  • SHA1

    ba0729a5325410bf52801bd1a3ed08ee8cf0d9f3

  • SHA256

    d1c78b5df2dcf3e34e8ba19aa34eaceb84cb061f013045c0927d798dbccb8763

  • SHA512

    eca0237f824b748110968d75b43165cee53f8955c8d74ef1a9389da8442b00c587faf531db37c089472676675ca0ff055df28aa6face1e6921e6337a665688e1

  • SSDEEP

    6144:mflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:mflfAsiVGjSGecvX

Score
10/10

Malware Config

Targets

    • Target

      d1c78b5df2dcf3e34e8ba19aa34eaceb84cb061f013045c0927d798dbccb8763

    • Size

      361KB

    • MD5

      aadc98e6eef0bca93eb2d8ceb288d5fd

    • SHA1

      ba0729a5325410bf52801bd1a3ed08ee8cf0d9f3

    • SHA256

      d1c78b5df2dcf3e34e8ba19aa34eaceb84cb061f013045c0927d798dbccb8763

    • SHA512

      eca0237f824b748110968d75b43165cee53f8955c8d74ef1a9389da8442b00c587faf531db37c089472676675ca0ff055df28aa6face1e6921e6337a665688e1

    • SSDEEP

      6144:mflfAsiL4lIJjiJcbI03GBc3ucY5DCSjX:mflfAsiVGjSGecvX

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks