Overview

overview

8

Static

static

965a3ed768...37.exe

windows7-x64

8

965a3ed768...37.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    965a3ed7682bc794184adc2bf1ae0830773c71c7d6c2c43ea3b5043bd7c73037

  • Size

    93KB

  • Sample

    221203-ch143shf4s

  • MD5

    dd2c350e982563b4fe22cbcb8faee7d3

  • SHA1

    d705f64a00454a24c2e014612022fc22d950ee30

  • SHA256

    965a3ed7682bc794184adc2bf1ae0830773c71c7d6c2c43ea3b5043bd7c73037

  • SHA512

    4a8b09c5a2f0491efea515167c75c08d50fb23c22ec4c2d0b508de660c9bf2ab9fddd715e351e274c28ba97888595601385ade7f65e7d6c6c4ec3c9fe17625e4

  • SSDEEP

    1536:YwH8z4lr3QF/GTqg8HLhobQLAfm5b8HLljs2mwEhstzWrY8p:lw4lr39Og8HlKQLAfMmLljJmwEixWrfp

Score
8/10
persistence

Malware Config

Targets

    • Target

      965a3ed7682bc794184adc2bf1ae0830773c71c7d6c2c43ea3b5043bd7c73037

    • Size

      93KB

    • MD5

      dd2c350e982563b4fe22cbcb8faee7d3

    • SHA1

      d705f64a00454a24c2e014612022fc22d950ee30

    • SHA256

      965a3ed7682bc794184adc2bf1ae0830773c71c7d6c2c43ea3b5043bd7c73037

    • SHA512

      4a8b09c5a2f0491efea515167c75c08d50fb23c22ec4c2d0b508de660c9bf2ab9fddd715e351e274c28ba97888595601385ade7f65e7d6c6c4ec3c9fe17625e4

    • SSDEEP

      1536:YwH8z4lr3QF/GTqg8HLhobQLAfm5b8HLljs2mwEhstzWrY8p:lw4lr39Og8HlKQLAfMmLljJmwEixWrfp

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks