Overview

overview

8

Static

static

c1bb58cb37...a8.exe

windows7-x64

8

c1bb58cb37...a8.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1bb58cb37aa885b7c79b4695152ba97c37af8b47d0260527d7b0c6acc7a4ba8

  • Size

    325KB

  • Sample

    221203-clrptahh4s

  • MD5

    f567015ef4d9a33155c8f88e65b2236b

  • SHA1

    a9ae3715d4d4b734f92defb27ce84e1cde4337c8

  • SHA256

    c1bb58cb37aa885b7c79b4695152ba97c37af8b47d0260527d7b0c6acc7a4ba8

  • SHA512

    b083bcefbbbf8e22b28044ab1c9507fd72391d0c06889d74be4c603ce0185086cc3418b62f73cfeecafc04cfa73c63148face1d265a1f0057d2ac3f59e5adecf

  • SSDEEP

    6144:xrDae918pzt531aeyPiFSqdTasejBw1W4n0fudSANW8UlGSUPC:xrDa/naeyES2peO1fEudNAG0

Score
8/10
persistence

Malware Config

Targets

    • Target

      c1bb58cb37aa885b7c79b4695152ba97c37af8b47d0260527d7b0c6acc7a4ba8

    • Size

      325KB

    • MD5

      f567015ef4d9a33155c8f88e65b2236b

    • SHA1

      a9ae3715d4d4b734f92defb27ce84e1cde4337c8

    • SHA256

      c1bb58cb37aa885b7c79b4695152ba97c37af8b47d0260527d7b0c6acc7a4ba8

    • SHA512

      b083bcefbbbf8e22b28044ab1c9507fd72391d0c06889d74be4c603ce0185086cc3418b62f73cfeecafc04cfa73c63148face1d265a1f0057d2ac3f59e5adecf

    • SSDEEP

      6144:xrDae918pzt531aeyPiFSqdTasejBw1W4n0fudSANW8UlGSUPC:xrDa/naeyES2peO1fEudNAG0

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks