Overview

overview

6

Static

static

febd943133...8e.exe

windows7-x64

5

febd943133...8e.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    febd9431332157875d6f467a5e0697d92d277f9cf23758a794219e59598c248e

  • Size

    177KB

  • Sample

    221203-cv2w5saf3s

  • MD5

    4d1c4f77de446ec1c809ae7302fe3720

  • SHA1

    bf2de9aa4ddf5b29b7a1748861463e3523787282

  • SHA256

    febd9431332157875d6f467a5e0697d92d277f9cf23758a794219e59598c248e

  • SHA512

    4455ce3f89068f132e185a8dd75834fc732c3634140264a8231ced62d4da2cd717e194718071ead3ce59e42bafefcfbdaafc503c7ac463c6b7d02b6739dfd62f

  • SSDEEP

    3072:HCQ++dHHrNpBSYQMcjZxcptz0a1o0/PQ63r7S4E7rXo2thgp8zEQE7yKeModR:1++5rvAnjcptH/Pl33parXt5RMyKeDdR

Score
6/10
persistence

Malware Config

Targets

    • Target

      febd9431332157875d6f467a5e0697d92d277f9cf23758a794219e59598c248e

    • Size

      177KB

    • MD5

      4d1c4f77de446ec1c809ae7302fe3720

    • SHA1

      bf2de9aa4ddf5b29b7a1748861463e3523787282

    • SHA256

      febd9431332157875d6f467a5e0697d92d277f9cf23758a794219e59598c248e

    • SHA512

      4455ce3f89068f132e185a8dd75834fc732c3634140264a8231ced62d4da2cd717e194718071ead3ce59e42bafefcfbdaafc503c7ac463c6b7d02b6739dfd62f

    • SSDEEP

      3072:HCQ++dHHrNpBSYQMcjZxcptz0a1o0/PQ63r7S4E7rXo2thgp8zEQE7yKeModR:1++5rvAnjcptH/Pl33parXt5RMyKeDdR

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks