Overview

overview

8

Static

static

95e987d876...27.exe

windows7-x64

8

95e987d876...27.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95e987d876d1729a913253a06951b6ecc06f376db62b529a19c273232a4afe27

  • Size

    315KB

  • Sample

    221203-kkh1aacc5t

  • MD5

    f2bb617b2457edbd97e4b721b3886561

  • SHA1

    d4022332cbae44df2112f90e35e8d8c43cfc77bf

  • SHA256

    95e987d876d1729a913253a06951b6ecc06f376db62b529a19c273232a4afe27

  • SHA512

    232a37b14c1d6d1d576c95bdeade91d92b7490eadc2a098d6a474295fd36c20b9ed383be6f717a11246a58a4c9195dffc5015790c60d074738218b90e4e4f9d0

  • SSDEEP

    6144:ODxcTponzQPSqzXXaydn3nozW5TFYkI4uLZMGLv+xxxxxxxxxxxxxxxxngxxxxxg:KeTGzQPRHHdn34y3IbnLGxxxxxxxxxxr

Score
8/10
persistence

Malware Config

Targets

    • Target

      95e987d876d1729a913253a06951b6ecc06f376db62b529a19c273232a4afe27

    • Size

      315KB

    • MD5

      f2bb617b2457edbd97e4b721b3886561

    • SHA1

      d4022332cbae44df2112f90e35e8d8c43cfc77bf

    • SHA256

      95e987d876d1729a913253a06951b6ecc06f376db62b529a19c273232a4afe27

    • SHA512

      232a37b14c1d6d1d576c95bdeade91d92b7490eadc2a098d6a474295fd36c20b9ed383be6f717a11246a58a4c9195dffc5015790c60d074738218b90e4e4f9d0

    • SSDEEP

      6144:ODxcTponzQPSqzXXaydn3nozW5TFYkI4uLZMGLv+xxxxxxxxxxxxxxxxngxxxxxg:KeTGzQPRHHdn34y3IbnLGxxxxxxxxxxr

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks