Overview

overview

8

Static

static

bf8922643d...f4.exe

windows7-x64

8

bf8922643d...f4.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    bf8922643df2ff5b735d45a9f1d8b37d4ff8295824a1dbb00a9dcd8a4a58e5f4

  • Size

    316KB

  • Sample

    221203-cmnpjshh9z

  • MD5

    2d52846c205bd835785d94b6aeac1b84

  • SHA1

    4b3867035fecd99a634ecef18779d87a884e0423

  • SHA256

    bf8922643df2ff5b735d45a9f1d8b37d4ff8295824a1dbb00a9dcd8a4a58e5f4

  • SHA512

    acaca8705f712cf41b12a3958e24ad4fd7c69fa17b934eb2a5b853cfc097e35f99b82c6a02b8cc622479916dbb991ddcac022c0261b8eb38d675ff42185f95d2

  • SSDEEP

    6144:3rumNEcLQLrZpxOWudiVm93clh8+HQ5bKQcl0ZjsWCO1J7KKWg6wgC9C8H/K+:ELrZi0493clhSERwPvhjpE8H/V

Score
8/10
persistence

Malware Config

Targets

    • Target

      bf8922643df2ff5b735d45a9f1d8b37d4ff8295824a1dbb00a9dcd8a4a58e5f4

    • Size

      316KB

    • MD5

      2d52846c205bd835785d94b6aeac1b84

    • SHA1

      4b3867035fecd99a634ecef18779d87a884e0423

    • SHA256

      bf8922643df2ff5b735d45a9f1d8b37d4ff8295824a1dbb00a9dcd8a4a58e5f4

    • SHA512

      acaca8705f712cf41b12a3958e24ad4fd7c69fa17b934eb2a5b853cfc097e35f99b82c6a02b8cc622479916dbb991ddcac022c0261b8eb38d675ff42185f95d2

    • SSDEEP

      6144:3rumNEcLQLrZpxOWudiVm93clh8+HQ5bKQcl0ZjsWCO1J7KKWg6wgC9C8H/K+:ELrZi0493clhSERwPvhjpE8H/V

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks