Overview

overview

8

Static

static

8a862508b2...89.exe

windows7-x64

8

8a862508b2...89.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a862508b25ff7ac9b05758d1228d2f8552e49c1a167a0291124bb1f7245d889

  • Size

    305KB

  • Sample

    221203-a3g6ladd9w

  • MD5

    98bbc7d04dea961a2597f690cb38aab8

  • SHA1

    163321027582fd13efe714fcada4b818859cd79b

  • SHA256

    8a862508b25ff7ac9b05758d1228d2f8552e49c1a167a0291124bb1f7245d889

  • SHA512

    cd3fdcfb2426cb537a11328874c53673bfea94e9b8656a107207eed7414ed721a4da52d8920b71afb20c5f7ebde7a623ccb19f2b82b8e8591b8593bd61a0ac25

  • SSDEEP

    6144:6ZVQK5tyRnJdaKwfZMSm/JZJVag4y4aRC2/IC0zzisaMJn:6ZVt54RnTwaS0J/4vXa4zqMJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      8a862508b25ff7ac9b05758d1228d2f8552e49c1a167a0291124bb1f7245d889

    • Size

      305KB

    • MD5

      98bbc7d04dea961a2597f690cb38aab8

    • SHA1

      163321027582fd13efe714fcada4b818859cd79b

    • SHA256

      8a862508b25ff7ac9b05758d1228d2f8552e49c1a167a0291124bb1f7245d889

    • SHA512

      cd3fdcfb2426cb537a11328874c53673bfea94e9b8656a107207eed7414ed721a4da52d8920b71afb20c5f7ebde7a623ccb19f2b82b8e8591b8593bd61a0ac25

    • SSDEEP

      6144:6ZVQK5tyRnJdaKwfZMSm/JZJVag4y4aRC2/IC0zzisaMJn:6ZVt54RnTwaS0J/4vXa4zqMJ

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks