Overview

overview

8

Static

static

bc200c6ddc...cb.exe

windows7-x64

8

bc200c6ddc...cb.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc200c6ddc4d67ae074ea296e078610048c787804a34b031f089154479ff66cb

  • Size

    286KB

  • Sample

    221203-rlkntsbh4t

  • MD5

    8815b0d1affae52d7ef12b4d5e33aa94

  • SHA1

    7e602402ab652e01681d65adcf9f73346a3db711

  • SHA256

    bc200c6ddc4d67ae074ea296e078610048c787804a34b031f089154479ff66cb

  • SHA512

    ef021b30df0b5209a9711daf439976aec59b42835c08df4b2828a86957f3af99be49fd9231f88ac5d74920c453e437ce5a08243aedc0152b8ac8a005d5de7374

  • SSDEEP

    6144:4xvFzscSrTJdQvITcs2u3R+xMMdJT0hjWM0Ltf4faB5RaBe:8vFzscSrTJd3xfSxJujWMSf8aBWw

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      bc200c6ddc4d67ae074ea296e078610048c787804a34b031f089154479ff66cb

    • Size

      286KB

    • MD5

      8815b0d1affae52d7ef12b4d5e33aa94

    • SHA1

      7e602402ab652e01681d65adcf9f73346a3db711

    • SHA256

      bc200c6ddc4d67ae074ea296e078610048c787804a34b031f089154479ff66cb

    • SHA512

      ef021b30df0b5209a9711daf439976aec59b42835c08df4b2828a86957f3af99be49fd9231f88ac5d74920c453e437ce5a08243aedc0152b8ac8a005d5de7374

    • SSDEEP

      6144:4xvFzscSrTJdQvITcs2u3R+xMMdJT0hjWM0Ltf4faB5RaBe:8vFzscSrTJd3xfSxJujWMSf8aBWw

    Score
    8/10
    discoverypersistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks