Overview

overview

8

Static

static

953f13daf2...d0.exe

windows7-x64

8

953f13daf2...d0.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    953f13daf2d284b56a0aacc29b9323eef7ce342424f9c89a184987e5290d48d0

  • Size

    96KB

  • Sample

    221203-v8wldsbc99

  • MD5

    bc9da4452d562769d5ba2a1296edb350

  • SHA1

    4cbf990b4ac00878c6001b21ea18f220ce421bfd

  • SHA256

    953f13daf2d284b56a0aacc29b9323eef7ce342424f9c89a184987e5290d48d0

  • SHA512

    68952d4b7a74033b7ece22f77a3fb2875d96c95a3e80e26e6a6422a37ec244c6d8ce11be1e509754861d4b6d6b72cdf8f10edef70fb332038e45d6b2b45fc703

  • SSDEEP

    3072:s4ns04C+GPL2P5mpBWrmBEy9oUzxF6mlvY34Us8:sHOD2UGeEyZzxF6mig

Score
8/10
persistence

Malware Config

Targets

    • Target

      953f13daf2d284b56a0aacc29b9323eef7ce342424f9c89a184987e5290d48d0

    • Size

      96KB

    • MD5

      bc9da4452d562769d5ba2a1296edb350

    • SHA1

      4cbf990b4ac00878c6001b21ea18f220ce421bfd

    • SHA256

      953f13daf2d284b56a0aacc29b9323eef7ce342424f9c89a184987e5290d48d0

    • SHA512

      68952d4b7a74033b7ece22f77a3fb2875d96c95a3e80e26e6a6422a37ec244c6d8ce11be1e509754861d4b6d6b72cdf8f10edef70fb332038e45d6b2b45fc703

    • SSDEEP

      3072:s4ns04C+GPL2P5mpBWrmBEy9oUzxF6mlvY34Us8:sHOD2UGeEyZzxF6mig

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Sets file execution options in registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks