Overview

overview

8

Static

static

763217ce15...46.exe

windows7-x64

8

763217ce15...46.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    763217ce15ae2f67ba5de59fb446a1c3108d8b086aec89a14010d2269db26f46

  • Size

    170KB

  • Sample

    221204-aexldahe83

  • MD5

    f1f8d1c0110bfbc64467bbc81c0a2398

  • SHA1

    8c7d5543b56d28867e9ba0702f76af848e66b1dc

  • SHA256

    763217ce15ae2f67ba5de59fb446a1c3108d8b086aec89a14010d2269db26f46

  • SHA512

    b744fe3a5ab9d615897f01f4b15537c8518a251b40325d450b369327a86690881d93c23a0a89b61837a8a092a759df39f4c110a27e54a846cf5fbae4c188bf6a

  • SSDEEP

    3072:uB+SKSgFHn9FSqpXTOPNx0U1wpjRIYkb3/XkhowiKhLiajBPnNWH3OrNEE:uB+SwyCIf0U1wFRQ/Xw3bjBPNWX6NEE

Score
8/10
persistence

Malware Config

Targets

    • Target

      763217ce15ae2f67ba5de59fb446a1c3108d8b086aec89a14010d2269db26f46

    • Size

      170KB

    • MD5

      f1f8d1c0110bfbc64467bbc81c0a2398

    • SHA1

      8c7d5543b56d28867e9ba0702f76af848e66b1dc

    • SHA256

      763217ce15ae2f67ba5de59fb446a1c3108d8b086aec89a14010d2269db26f46

    • SHA512

      b744fe3a5ab9d615897f01f4b15537c8518a251b40325d450b369327a86690881d93c23a0a89b61837a8a092a759df39f4c110a27e54a846cf5fbae4c188bf6a

    • SSDEEP

      3072:uB+SKSgFHn9FSqpXTOPNx0U1wpjRIYkb3/XkhowiKhLiajBPnNWH3OrNEE:uB+SwyCIf0U1wFRQ/Xw3bjBPNWX6NEE

    Score
    8/10
    persistence

    • Registers COM server for autorun

      persistence

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks