Overview

overview

8

Static

static

b168852df4...92.exe

windows7-x64

8

b168852df4...92.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b168852df4ecb965d2a5029fdfa6d5b780e2db0e7c9dc36d0d9108ee526e2092

  • Size

    291KB

  • Sample

    221203-almdzscb2y

  • MD5

    b71b05d55d2f180e6ca3a0945b445cc3

  • SHA1

    812f519afd873e4928ddfd19931f8679a46d8764

  • SHA256

    b168852df4ecb965d2a5029fdfa6d5b780e2db0e7c9dc36d0d9108ee526e2092

  • SHA512

    b305ea9d6568925a5d66c850b51f8f40d50e7560dc2686c6ad0270259ebc132c9dcd556dfcb9b1c1e1a09e88cb6879ceed2d3059601e3a6d96a70d557c4a4ea6

  • SSDEEP

    6144:BFTbOpMDvDpB7wY4n74fHyjZRVkc3py7u/qbWhprKa:BYpkvVZu7WoZRVfcu/qqhpma

Score
8/10
persistence

Malware Config

Targets

    • Target

      b168852df4ecb965d2a5029fdfa6d5b780e2db0e7c9dc36d0d9108ee526e2092

    • Size

      291KB

    • MD5

      b71b05d55d2f180e6ca3a0945b445cc3

    • SHA1

      812f519afd873e4928ddfd19931f8679a46d8764

    • SHA256

      b168852df4ecb965d2a5029fdfa6d5b780e2db0e7c9dc36d0d9108ee526e2092

    • SHA512

      b305ea9d6568925a5d66c850b51f8f40d50e7560dc2686c6ad0270259ebc132c9dcd556dfcb9b1c1e1a09e88cb6879ceed2d3059601e3a6d96a70d557c4a4ea6

    • SSDEEP

      6144:BFTbOpMDvDpB7wY4n74fHyjZRVkc3py7u/qbWhprKa:BYpkvVZu7WoZRVfcu/qqhpma

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks