Overview

overview

8

Static

static

9ea6a761d3...83.exe

windows7-x64

8

9ea6a761d3...83.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583

  • Size

    307KB

  • Sample

    221203-t2r4ysbd7s

  • MD5

    35ef48894e2c36f32aed0a8aab9b18f0

  • SHA1

    b170d90ea5b7394236625abeaffd55f7cfcf9c7f

  • SHA256

    9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583

  • SHA512

    84089a6ad90d318cc6bb4f17a787b75d17c91bf517bc4d8abefeb6b4528e464aa024a0f35e1eb769b7a30e18a6912468e6393eac5bc973ea16fba67843b8cb20

  • SSDEEP

    6144:ISjc2VwR34nDw2rL4Q8e21U4JH6pk19rRJssReU8ZI1Fvk1:9uRoM2rL9E6+FnAZITM

Score
8/10
persistence

Malware Config

Targets

    • Target

      9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583

    • Size

      307KB

    • MD5

      35ef48894e2c36f32aed0a8aab9b18f0

    • SHA1

      b170d90ea5b7394236625abeaffd55f7cfcf9c7f

    • SHA256

      9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583

    • SHA512

      84089a6ad90d318cc6bb4f17a787b75d17c91bf517bc4d8abefeb6b4528e464aa024a0f35e1eb769b7a30e18a6912468e6393eac5bc973ea16fba67843b8cb20

    • SSDEEP

      6144:ISjc2VwR34nDw2rL4Q8e21U4JH6pk19rRJssReU8ZI1Fvk1:9uRoM2rL9E6+FnAZITM

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks