Overview

overview

8

Static

static

ea0a8c5fa9...e5.exe

windows7-x64

8

ea0a8c5fa9...e5.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5

  • Size

    307KB

  • Sample

    221203-ns9dzsbb8y

  • MD5

    a0d21b621ec55a796199188c1538d757

  • SHA1

    fb40f64ea2ecf8656bf3336b8709fc1edebd2bce

  • SHA256

    ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5

  • SHA512

    c56b7849cc1349d7f4b15537fb3ab1d7f8e8d73dc1725f6ee75e94e4c77bd3e3887898ca8b2849abd841bfe9f8672d709e691c85faa5585aadd0255556a195fc

  • SSDEEP

    6144:36kg9aRhVpgTNX9MZTgQBzzl/NcuFT6sDBF0LqOGe/03WS7SAOA:3GqUTNX9MRBzzl/Ncu0sWqOFOWUOA

Score
8/10
persistence

Malware Config

Targets

    • Target

      ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5

    • Size

      307KB

    • MD5

      a0d21b621ec55a796199188c1538d757

    • SHA1

      fb40f64ea2ecf8656bf3336b8709fc1edebd2bce

    • SHA256

      ea0a8c5fa91a055f6a8056ef6a97717ef1feec1af6f4e07889ac92c8675cc1e5

    • SHA512

      c56b7849cc1349d7f4b15537fb3ab1d7f8e8d73dc1725f6ee75e94e4c77bd3e3887898ca8b2849abd841bfe9f8672d709e691c85faa5585aadd0255556a195fc

    • SSDEEP

      6144:36kg9aRhVpgTNX9MZTgQBzzl/NcuFT6sDBF0LqOGe/03WS7SAOA:3GqUTNX9MRBzzl/Ncu0sWqOFOWUOA

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks