Overview

overview

8

Static

static

3f16747369...09.exe

windows7-x64

8

3f16747369...09.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f1674736903c9a16524316f6a0b1ec3e4ba9abecfd0fd6499c7bb2bf409fe09

  • Size

    298KB

  • Sample

    221202-wkw3paec4x

  • MD5

    f1f9aa73c00535e3d4c30b5b629f294e

  • SHA1

    c34943770c46644937f2ad9a3cdb7bc3ae0c3bc4

  • SHA256

    3f1674736903c9a16524316f6a0b1ec3e4ba9abecfd0fd6499c7bb2bf409fe09

  • SHA512

    373ad157482c086a8ec1069a7c3d916e3cda3975d4f46bc3aecf24f915f8e4c72b46fcf56e4e927c340325bd7f124f07dae00f847f747093e26ef3f4735c9dfe

  • SSDEEP

    6144:tVPodq/3SV0vY/9eu9t55uPllfFVkZQ4BbtW/r91d7aHBbkJcrwMF:txgq/320vY/9/5wPD9QQ4rWLd7ahzF

Score
8/10
persistence

Malware Config

Targets

    • Target

      3f1674736903c9a16524316f6a0b1ec3e4ba9abecfd0fd6499c7bb2bf409fe09

    • Size

      298KB

    • MD5

      f1f9aa73c00535e3d4c30b5b629f294e

    • SHA1

      c34943770c46644937f2ad9a3cdb7bc3ae0c3bc4

    • SHA256

      3f1674736903c9a16524316f6a0b1ec3e4ba9abecfd0fd6499c7bb2bf409fe09

    • SHA512

      373ad157482c086a8ec1069a7c3d916e3cda3975d4f46bc3aecf24f915f8e4c72b46fcf56e4e927c340325bd7f124f07dae00f847f747093e26ef3f4735c9dfe

    • SSDEEP

      6144:tVPodq/3SV0vY/9eu9t55uPllfFVkZQ4BbtW/r91d7aHBbkJcrwMF:txgq/320vY/9/5wPD9QQ4rWLd7ahzF

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks