Overview

overview

8

Static

static

bc6feccde5...0e.exe

windows7-x64

8

bc6feccde5...0e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc6feccde53ba525c8f79b92893febb4d0b79d97a6c41bbdcfe41fee42550f0e

  • Size

    380KB

  • Sample

    221203-rkp7xsbg6v

  • MD5

    dd242aea6a7f5d531c7f2211f93853b5

  • SHA1

    23f956ec84beefa26251a387ebac53ac7a7d7afc

  • SHA256

    bc6feccde53ba525c8f79b92893febb4d0b79d97a6c41bbdcfe41fee42550f0e

  • SHA512

    4eaf15761339213a5529c8b9dee7d0b0cbb398e80f172208396181daf4d5d3eb98ea00b9169497ff4b18c81cdf76932edd8ceef2aa0d7af0df304515a6751e46

  • SSDEEP

    6144:ctZg7XT5XLo5qAnnk6N5vC4PZN/maXoQgp8884+3UcTmeZBllOXmiuP3bti4:ctm7X9XVmnpDC6VXovpX8MzkBqXOPM4

Score
8/10
persistence

Malware Config

Targets

    • Target

      bc6feccde53ba525c8f79b92893febb4d0b79d97a6c41bbdcfe41fee42550f0e

    • Size

      380KB

    • MD5

      dd242aea6a7f5d531c7f2211f93853b5

    • SHA1

      23f956ec84beefa26251a387ebac53ac7a7d7afc

    • SHA256

      bc6feccde53ba525c8f79b92893febb4d0b79d97a6c41bbdcfe41fee42550f0e

    • SHA512

      4eaf15761339213a5529c8b9dee7d0b0cbb398e80f172208396181daf4d5d3eb98ea00b9169497ff4b18c81cdf76932edd8ceef2aa0d7af0df304515a6751e46

    • SSDEEP

      6144:ctZg7XT5XLo5qAnnk6N5vC4PZN/maXoQgp8884+3UcTmeZBllOXmiuP3bti4:ctm7X9XVmnpDC6VXovpX8MzkBqXOPM4

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks