Overview

overview

7

Static

static

7

a017266245...99.exe

windows7-x64

7

a017266245...99.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a017266245443e4d00455478199f00ab40dc8bcf2cceb846894b99bfe5ba2e99

  • Size

    1.5MB

  • Sample

    221203-wxs7kade36

  • MD5

    2b9c5f11da7a9d56eea7c6625e8c7b69

  • SHA1

    14946e3e75d5d68dd376805e23e8c7cdc53d1d3e

  • SHA256

    a017266245443e4d00455478199f00ab40dc8bcf2cceb846894b99bfe5ba2e99

  • SHA512

    bc586da529f9bc828d0edead55b3f976a6c4e692eec9da5b32f5f35adaf9c83fd5f91d14d3d4a69775097266d1718186463cf68e11cf650f843424a98246a8db

  • SSDEEP

    24576:LyxPnMiWuR5nBlJCYpXBHdiJYQ1ohq8JNZ4zYWEMNa/o7NbBVBo8PbiWGqGZl7fx:Ly6i5hdCEXB9mYQ1oI6iEsNbdoSb2lzt

Score
7/10
persistencethemida

Malware Config

Targets

    • Target

      a017266245443e4d00455478199f00ab40dc8bcf2cceb846894b99bfe5ba2e99

    • Size

      1.5MB

    • MD5

      2b9c5f11da7a9d56eea7c6625e8c7b69

    • SHA1

      14946e3e75d5d68dd376805e23e8c7cdc53d1d3e

    • SHA256

      a017266245443e4d00455478199f00ab40dc8bcf2cceb846894b99bfe5ba2e99

    • SHA512

      bc586da529f9bc828d0edead55b3f976a6c4e692eec9da5b32f5f35adaf9c83fd5f91d14d3d4a69775097266d1718186463cf68e11cf650f843424a98246a8db

    • SSDEEP

      24576:LyxPnMiWuR5nBlJCYpXBHdiJYQ1ohq8JNZ4zYWEMNa/o7NbBVBo8PbiWGqGZl7fx:Ly6i5hdCEXB9mYQ1oI6iEsNbdoSb2lzt

    Score
    7/10
    persistencethemida

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks