Overview

overview

8

Static

static

da2e64f8ec...f0.exe

windows7-x64

8

da2e64f8ec...f0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da2e64f8ec13731a67128c3a64052739272e3aa53e5ecbe656a28488f0197bf0

  • Size

    39KB

  • Sample

    221203-yawehsdc7w

  • MD5

    91d3fd5375b42c88615b01c6a6807bf9

  • SHA1

    0bf7fb9c88a91349e587f81d23569641271750a4

  • SHA256

    da2e64f8ec13731a67128c3a64052739272e3aa53e5ecbe656a28488f0197bf0

  • SHA512

    c0ad0ca6ab0a892d63e297a16abe1aeb93bada5182f42957c32b0ad80123a35c4fc9c0ccc683af5158c6ab4ad87db935f34c89f9f65e67551b4e7e8af9c222e8

  • SSDEEP

    768:SzLoYj/s3MY2C162DG9pFz6uEpYJgiMgIf2aNBIFZCzccx5BXPoT:0MYQ3n2WTczxqYJgHf2aNBSZ5cx5Fq

Score
8/10

Malware Config

Targets

    • Target

      da2e64f8ec13731a67128c3a64052739272e3aa53e5ecbe656a28488f0197bf0

    • Size

      39KB

    • MD5

      91d3fd5375b42c88615b01c6a6807bf9

    • SHA1

      0bf7fb9c88a91349e587f81d23569641271750a4

    • SHA256

      da2e64f8ec13731a67128c3a64052739272e3aa53e5ecbe656a28488f0197bf0

    • SHA512

      c0ad0ca6ab0a892d63e297a16abe1aeb93bada5182f42957c32b0ad80123a35c4fc9c0ccc683af5158c6ab4ad87db935f34c89f9f65e67551b4e7e8af9c222e8

    • SSDEEP

      768:SzLoYj/s3MY2C162DG9pFz6uEpYJgiMgIf2aNBIFZCzccx5BXPoT:0MYQ3n2WTczxqYJgHf2aNBSZ5cx5Fq

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks