Overview

overview

8

Static

static

eca1c4d9ac...d7.exe

windows7-x64

8

eca1c4d9ac...d7.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    eca1c4d9acd6a808dddcb02e77c8a9f4717aee80e69b56b655e606bb3156e2d7

  • Size

    162KB

  • Sample

    221203-npqgpsag9z

  • MD5

    71ff165d84aac87cdbe808c84b0483c9

  • SHA1

    3da132da2028ff7783679c153dffa1c395c1d12d

  • SHA256

    eca1c4d9acd6a808dddcb02e77c8a9f4717aee80e69b56b655e606bb3156e2d7

  • SHA512

    c5f7becd2d652fd56f92997efb23af0b0dd346d8059e6e66472c5ed9d42a64df2c1fde64f599e69ff1d2365fecce184f5a9a7e066e50570db2de56585165fb01

  • SSDEEP

    3072:0INfsoQgohFB/baa5M2YeXTDYa9n18MgHbNmhI4TbTSdNzLH+v0hV:0INffmB/IejPlXgpYIWHSTHHh

Score
8/10
persistence

Malware Config

Targets

    • Target

      eca1c4d9acd6a808dddcb02e77c8a9f4717aee80e69b56b655e606bb3156e2d7

    • Size

      162KB

    • MD5

      71ff165d84aac87cdbe808c84b0483c9

    • SHA1

      3da132da2028ff7783679c153dffa1c395c1d12d

    • SHA256

      eca1c4d9acd6a808dddcb02e77c8a9f4717aee80e69b56b655e606bb3156e2d7

    • SHA512

      c5f7becd2d652fd56f92997efb23af0b0dd346d8059e6e66472c5ed9d42a64df2c1fde64f599e69ff1d2365fecce184f5a9a7e066e50570db2de56585165fb01

    • SSDEEP

      3072:0INfsoQgohFB/baa5M2YeXTDYa9n18MgHbNmhI4TbTSdNzLH+v0hV:0INffmB/IejPlXgpYIWHSTHHh

    Score
    8/10
    persistence

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks