Overview

overview

8

Static

static

ea76d87dee...73.exe

windows7-x64

8

ea76d87dee...73.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea76d87deebe8855de5f99dbdb01570984e3c9e4bd64258459f2d00158bdc973

  • Size

    351KB

  • Sample

    221203-nsgzqsfg24

  • MD5

    fcefca24655ef5a71891756b1aec6bb7

  • SHA1

    e3553960dff098d076b17356a54809d585217b20

  • SHA256

    ea76d87deebe8855de5f99dbdb01570984e3c9e4bd64258459f2d00158bdc973

  • SHA512

    c0feccd8a6c0a8d0916c4a0995e65a55e43fa2ee0d12e9697b14be99f35b1aefaa1a10f2022b295e721c4ec5d30c15fc4f4be1f06684e06ff7f26ec9dc4a023e

  • SSDEEP

    6144:Z3c4cg0RO2MEKSpvLFaWhyavaYKcJnuTYULXcYWUQ29lV65K:ZiBTMHS5FZlSYKcJiY8XwC9ls5K

Score
8/10
persistence

Malware Config

Targets

    • Target

      ea76d87deebe8855de5f99dbdb01570984e3c9e4bd64258459f2d00158bdc973

    • Size

      351KB

    • MD5

      fcefca24655ef5a71891756b1aec6bb7

    • SHA1

      e3553960dff098d076b17356a54809d585217b20

    • SHA256

      ea76d87deebe8855de5f99dbdb01570984e3c9e4bd64258459f2d00158bdc973

    • SHA512

      c0feccd8a6c0a8d0916c4a0995e65a55e43fa2ee0d12e9697b14be99f35b1aefaa1a10f2022b295e721c4ec5d30c15fc4f4be1f06684e06ff7f26ec9dc4a023e

    • SSDEEP

      6144:Z3c4cg0RO2MEKSpvLFaWhyavaYKcJnuTYULXcYWUQ29lV65K:ZiBTMHS5FZlSYKcJiY8XwC9ls5K

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks