Overview

overview

8

Static

static

a2b53236b2...dd.exe

windows7-x64

8

a2b53236b2...dd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2b53236b25a98a938b72fca1186a61aba00a44cb997f54f9feced66a209cddd

  • Size

    147KB

  • Sample

    221203-gwsgbabb47

  • MD5

    69b6f7ef5f84a442dd8b9c7ba98a75a3

  • SHA1

    8b2d53d7d9589bd5cfa7073f96fb0f6f6c4f68de

  • SHA256

    a2b53236b25a98a938b72fca1186a61aba00a44cb997f54f9feced66a209cddd

  • SHA512

    13d64fcbe5e04db4e3377e37ddac4516e1a757f81623cbcb87486083f382208d7bbf764bdb526551edc4ddd19097a27b7cad32d1b4b8e850f1a61c8fe1b9a011

  • SSDEEP

    3072:xx0lz1kh8pzYymYhCk4iyekFohJpoxRkElumMNh:whkh8pzgc1+ekeDdElumML

Score
8/10
persistence

Malware Config

Targets

    • Target

      a2b53236b25a98a938b72fca1186a61aba00a44cb997f54f9feced66a209cddd

    • Size

      147KB

    • MD5

      69b6f7ef5f84a442dd8b9c7ba98a75a3

    • SHA1

      8b2d53d7d9589bd5cfa7073f96fb0f6f6c4f68de

    • SHA256

      a2b53236b25a98a938b72fca1186a61aba00a44cb997f54f9feced66a209cddd

    • SHA512

      13d64fcbe5e04db4e3377e37ddac4516e1a757f81623cbcb87486083f382208d7bbf764bdb526551edc4ddd19097a27b7cad32d1b4b8e850f1a61c8fe1b9a011

    • SSDEEP

      3072:xx0lz1kh8pzYymYhCk4iyekFohJpoxRkElumMNh:whkh8pzgc1+ekeDdElumML

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks