Overview

overview

8

Static

static

e080049a04...1e.exe

windows7-x64

8

e080049a04...1e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e080049a04127c2a5d21343098bbbaed79be0d255bd1862d311bdbc9e137661e

  • Size

    431KB

  • Sample

    221204-h65eascc6x

  • MD5

    d0555892523bc2949373e803ed1f1703

  • SHA1

    e1e5d5e0440359315dc9e69ee3e3df2dde6af30f

  • SHA256

    e080049a04127c2a5d21343098bbbaed79be0d255bd1862d311bdbc9e137661e

  • SHA512

    ec071314b4a902fd31060d19d010d19f7f0099788988e069230f758f55d8ccc7c55aca819492d7504c7a12adafe697d25170e16a27c3a96360dc8bf9d5c8568a

  • SSDEEP

    12288:xCDebz10dvYQZ45LhjSJhEyOo1hUF3V8C+guFythEeZArV:9W/m5LQJIo4rgguq7qrV

Score
8/10
persistence

Malware Config

Targets

    • Target

      e080049a04127c2a5d21343098bbbaed79be0d255bd1862d311bdbc9e137661e

    • Size

      431KB

    • MD5

      d0555892523bc2949373e803ed1f1703

    • SHA1

      e1e5d5e0440359315dc9e69ee3e3df2dde6af30f

    • SHA256

      e080049a04127c2a5d21343098bbbaed79be0d255bd1862d311bdbc9e137661e

    • SHA512

      ec071314b4a902fd31060d19d010d19f7f0099788988e069230f758f55d8ccc7c55aca819492d7504c7a12adafe697d25170e16a27c3a96360dc8bf9d5c8568a

    • SSDEEP

      12288:xCDebz10dvYQZ45LhjSJhEyOo1hUF3V8C+guFythEeZArV:9W/m5LQJIo4rgguq7qrV

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks