Overview

overview

8

Static

static

b65ddd4cea...fe.exe

windows7-x64

8

b65ddd4cea...fe.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b65ddd4ceaa11e4f6255afa9db949248ae2ee88a53ff5c5349b9021a60980bfe

  • Size

    379KB

  • Sample

    221203-hlw77agf3t

  • MD5

    23e8bb8f1d281be73c4fc5e0976b5621

  • SHA1

    a5d4b5daa3d7f4b5b018c9a08b554cdf00cba98c

  • SHA256

    b65ddd4ceaa11e4f6255afa9db949248ae2ee88a53ff5c5349b9021a60980bfe

  • SHA512

    01c37cc243c162ea6d45020ab65802b4e5366b85f483042a6cf0b4137937f68af1b9ac9308c291bfdc6918232f6b5e5ff4bf2786f9fa8ba40b4886c683589ec6

  • SSDEEP

    3072:fiR1GIijpSq/1hvPthXeSJHCPoWXy3vzdkxMrz2COS19qlvnDs12PNy5kLwcQ/ul:f4kHpSWfXmgWXy3esz2BSHq4i3L

Score
8/10
persistence

Malware Config

Targets

    • Target

      b65ddd4ceaa11e4f6255afa9db949248ae2ee88a53ff5c5349b9021a60980bfe

    • Size

      379KB

    • MD5

      23e8bb8f1d281be73c4fc5e0976b5621

    • SHA1

      a5d4b5daa3d7f4b5b018c9a08b554cdf00cba98c

    • SHA256

      b65ddd4ceaa11e4f6255afa9db949248ae2ee88a53ff5c5349b9021a60980bfe

    • SHA512

      01c37cc243c162ea6d45020ab65802b4e5366b85f483042a6cf0b4137937f68af1b9ac9308c291bfdc6918232f6b5e5ff4bf2786f9fa8ba40b4886c683589ec6

    • SSDEEP

      3072:fiR1GIijpSq/1hvPthXeSJHCPoWXy3vzdkxMrz2COS19qlvnDs12PNy5kLwcQ/ul:f4kHpSWfXmgWXy3esz2BSHq4i3L

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks