Overview

overview

8

Static

static

0f3a41ce04...ed.exe

windows7-x64

8

0f3a41ce04...ed.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed

  • Size

    298KB

  • Sample

    221202-wkxzzsae86

  • MD5

    63ace4f28f105e406b07564a9058049d

  • SHA1

    56aab05429fd588838e1b671a5be8007cfef1dc8

  • SHA256

    0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed

  • SHA512

    07191dfe1dd3641f7ad6a1475f51ed1c28db561a31a39c1e4d4fc7c46813e7939d34df453d1fd6cb30812edbefd6ea31ab57e5038a7e47bba0809a6bb6323ee9

  • SSDEEP

    6144:EamVPodz8wi1x9Xx09QnAgm2sx6lO9of0ocV2j0MN+IOKyZ1b1C:+xgYt/9Xx0mA8sxaeV2j0Jd/b1

Score
8/10
persistence

Malware Config

Targets

    • Target

      0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed

    • Size

      298KB

    • MD5

      63ace4f28f105e406b07564a9058049d

    • SHA1

      56aab05429fd588838e1b671a5be8007cfef1dc8

    • SHA256

      0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed

    • SHA512

      07191dfe1dd3641f7ad6a1475f51ed1c28db561a31a39c1e4d4fc7c46813e7939d34df453d1fd6cb30812edbefd6ea31ab57e5038a7e47bba0809a6bb6323ee9

    • SSDEEP

      6144:EamVPodz8wi1x9Xx09QnAgm2sx6lO9of0ocV2j0MN+IOKyZ1b1C:+xgYt/9Xx0mA8sxaeV2j0Jd/b1

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks