Overview

overview

8

Static

static

73a2ae871d...a3.exe

windows7-x64

8

73a2ae871d...a3.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    73a2ae871d46710c0e931e95dadd79624a35596276d8f0d864e0dbfdf20b48a3

  • Size

    307KB

  • Sample

    221202-wv1tmabc65

  • MD5

    a2487b1cac55bd421ad9d2b04b24e96b

  • SHA1

    f09f1f53805a1396965349154087c0b37552da74

  • SHA256

    73a2ae871d46710c0e931e95dadd79624a35596276d8f0d864e0dbfdf20b48a3

  • SHA512

    13f6681b5d72302ae3b387dd2cb8b5832aa962fea612302f2f9d426ccfb385421c06ecd7b48f71954d82771d62bb2cd7e1bf8a29e536dedf1ed3a7e6331aee61

  • SSDEEP

    6144:c2zydZlCjJWfRUpzY4Dr+izzJwr1KHrECeykKTeEpqYRrc07qi7+MgGyRN:c2ydZlCjJWuFvDx15kKThfgk7+JJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      73a2ae871d46710c0e931e95dadd79624a35596276d8f0d864e0dbfdf20b48a3

    • Size

      307KB

    • MD5

      a2487b1cac55bd421ad9d2b04b24e96b

    • SHA1

      f09f1f53805a1396965349154087c0b37552da74

    • SHA256

      73a2ae871d46710c0e931e95dadd79624a35596276d8f0d864e0dbfdf20b48a3

    • SHA512

      13f6681b5d72302ae3b387dd2cb8b5832aa962fea612302f2f9d426ccfb385421c06ecd7b48f71954d82771d62bb2cd7e1bf8a29e536dedf1ed3a7e6331aee61

    • SSDEEP

      6144:c2zydZlCjJWfRUpzY4Dr+izzJwr1KHrECeykKTeEpqYRrc07qi7+MgGyRN:c2ydZlCjJWuFvDx15kKThfgk7+JJ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks