Overview

overview

8

Static

static

f35967b506...6b.exe

windows7-x64

8

f35967b506...6b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f35967b5066a6ad7279dc6ca83d527ac6d69518f23f832da3c75827bad18776b

  • Size

    701KB

  • Sample

    221203-w5rzgahf6w

  • MD5

    a9d667c90007895deeb57859b332baf1

  • SHA1

    d06e81de09ae6c5c69168d1bbb37b2dd253e71d2

  • SHA256

    f35967b5066a6ad7279dc6ca83d527ac6d69518f23f832da3c75827bad18776b

  • SHA512

    68d4f0f92720bcd63c0b7539e13a4b137d131ae52b8473314edb6adc5b63cd1bca035bcfabae70acc0e1b76f51e5b69a72381785cceb69c917b0421a39a961ba

  • SSDEEP

    12288:arJOmckcjYkNctl97So3klSqes1LxvHYJVwshcGq/GqZzE/xJ8:kJOmqsA69fcS611GWsW/GczE/xJ8

Score
8/10
persistence

Malware Config

Targets

    • Target

      f35967b5066a6ad7279dc6ca83d527ac6d69518f23f832da3c75827bad18776b

    • Size

      701KB

    • MD5

      a9d667c90007895deeb57859b332baf1

    • SHA1

      d06e81de09ae6c5c69168d1bbb37b2dd253e71d2

    • SHA256

      f35967b5066a6ad7279dc6ca83d527ac6d69518f23f832da3c75827bad18776b

    • SHA512

      68d4f0f92720bcd63c0b7539e13a4b137d131ae52b8473314edb6adc5b63cd1bca035bcfabae70acc0e1b76f51e5b69a72381785cceb69c917b0421a39a961ba

    • SSDEEP

      12288:arJOmckcjYkNctl97So3klSqes1LxvHYJVwshcGq/GqZzE/xJ8:kJOmqsA69fcS611GWsW/GczE/xJ8

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks