Overview

overview

8

Static

static

c46ce79062...0c.exe

windows7-x64

8

c46ce79062...0c.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    c46ce7906275fc23623a523e321922e973815ffdcc0020e40cb5d3cd1a61cf0c

  • Size

    160KB

  • Sample

    221203-qxr2lshf7t

  • MD5

    76c2fce5d2f1052d2a9705c7bb3c1845

  • SHA1

    f0b25421dbdf8708471b3d5ef241da31531b4b3c

  • SHA256

    c46ce7906275fc23623a523e321922e973815ffdcc0020e40cb5d3cd1a61cf0c

  • SHA512

    a1ea6fab5a44c1feb8cb5b0e63bd7e0949614672c1cfc512796fc8dc9d35fce787b22e23aa729acce731aca0843d15ccb215582604da69fe24a5be6657cb4985

  • SSDEEP

    3072:xWuouTi8quKl3egpESlCcQTPb3H0gH8VdeKlPu/QpUhXASZD:Aai+mPpkpTPb0gH8VI

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      c46ce7906275fc23623a523e321922e973815ffdcc0020e40cb5d3cd1a61cf0c

    • Size

      160KB

    • MD5

      76c2fce5d2f1052d2a9705c7bb3c1845

    • SHA1

      f0b25421dbdf8708471b3d5ef241da31531b4b3c

    • SHA256

      c46ce7906275fc23623a523e321922e973815ffdcc0020e40cb5d3cd1a61cf0c

    • SHA512

      a1ea6fab5a44c1feb8cb5b0e63bd7e0949614672c1cfc512796fc8dc9d35fce787b22e23aa729acce731aca0843d15ccb215582604da69fe24a5be6657cb4985

    • SSDEEP

      3072:xWuouTi8quKl3egpESlCcQTPb3H0gH8VdeKlPu/QpUhXASZD:Aai+mPpkpTPb0gH8VI

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks