Overview

overview

8

Static

static

9907b340c0...f1.exe

windows7-x64

8

9907b340c0...f1.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    9907b340c005e002e49d580a7758ab4474f968c607bb5871e5f3232cfef028f1

  • Size

    1.2MB

  • Sample

    221203-t96mbagg83

  • MD5

    f6a0a73b78217f2835a23153fbad16a5

  • SHA1

    c2a7d33a635eb4f6daf32b75ac593b23905fec90

  • SHA256

    9907b340c005e002e49d580a7758ab4474f968c607bb5871e5f3232cfef028f1

  • SHA512

    6de3695a625ef195730ed76a0149158a16a8e85e0dc12a8fc75b91d06f9f40b4642a16652f4b45caf262fa63da47a7b4ef0b6e4abb690caecfe5176c92582f9b

  • SSDEEP

    12288:wBv7uOLX0KrNe6gtU4fujB8AJIzXwDdBhNYDf3t5:7eZrNt4fujjJYX4Yb3

Score
8/10
persistence

Malware Config

Targets

    • Target

      9907b340c005e002e49d580a7758ab4474f968c607bb5871e5f3232cfef028f1

    • Size

      1.2MB

    • MD5

      f6a0a73b78217f2835a23153fbad16a5

    • SHA1

      c2a7d33a635eb4f6daf32b75ac593b23905fec90

    • SHA256

      9907b340c005e002e49d580a7758ab4474f968c607bb5871e5f3232cfef028f1

    • SHA512

      6de3695a625ef195730ed76a0149158a16a8e85e0dc12a8fc75b91d06f9f40b4642a16652f4b45caf262fa63da47a7b4ef0b6e4abb690caecfe5176c92582f9b

    • SSDEEP

      12288:wBv7uOLX0KrNe6gtU4fujB8AJIzXwDdBhNYDf3t5:7eZrNt4fujjJYX4Yb3

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks