Overview

overview

8

Static

static

7d84ca06fa...53.exe

windows7-x64

8

7d84ca06fa...53.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253

  • Size

    209KB

  • Sample

    221202-z9343seh93

  • MD5

    d6529cc6041d7a80b0b69e42420b1242

  • SHA1

    dc4de780ead9f585dd3c1818af8f0ec4b0e508d1

  • SHA256

    7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253

  • SHA512

    7f08f8dbd7fa4e3484f0eb9eb48a02706c454c82f98e5eccbcd525a82b203ac3d3ea587d63c6f4a3f65c0be16c3edf7c22792a4029552c7d86cbd8223945a31a

  • SSDEEP

    3072:tjYOFZdahMAiVfXtB+lltpnNryrCVM4DkO1eqfG5qB3NP9:jZdfAkPi3nNLdkK3O5qB3NP

Score
8/10

Malware Config

Targets

    • Target

      7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253

    • Size

      209KB

    • MD5

      d6529cc6041d7a80b0b69e42420b1242

    • SHA1

      dc4de780ead9f585dd3c1818af8f0ec4b0e508d1

    • SHA256

      7d84ca06fa5420ff75daaebedeffe8446e92783bb02eb18bda262585cfea7253

    • SHA512

      7f08f8dbd7fa4e3484f0eb9eb48a02706c454c82f98e5eccbcd525a82b203ac3d3ea587d63c6f4a3f65c0be16c3edf7c22792a4029552c7d86cbd8223945a31a

    • SSDEEP

      3072:tjYOFZdahMAiVfXtB+lltpnNryrCVM4DkO1eqfG5qB3NP9:jZdfAkPi3nNLdkK3O5qB3NP

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks