Overview

overview

10

Static

static

fbfd3c8ce0...c1.exe

windows7-x64

10

fbfd3c8ce0...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbfd3c8ce00170e1ee29922c5563a7fa64e65bbd1431a48cbc1f0a7fa5fa57c1

  • Size

    120KB

  • Sample

    221204-j59hasfb9y

  • MD5

    8322cc372aaa560cc766c43721158a8a

  • SHA1

    571e7ab67b634137d9720471042115e2b86acb3a

  • SHA256

    fbfd3c8ce00170e1ee29922c5563a7fa64e65bbd1431a48cbc1f0a7fa5fa57c1

  • SHA512

    20850c5724c073f3680c9191d1b35623848a20404f10068aa5184b5ceb987adcd0a0e57211028740d48b3f139273871854def5dc8b47fec77709e2d83092b8a8

  • SSDEEP

    1536:Z6CcQOLfUdmRoBDVYV9iMdFqB3yA+5YeEsaKNeIVZ+nfjXBxq65PgW5nYnt47b:ZTfrioMaBSYeeKcIVMnrRk61dY+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fbfd3c8ce00170e1ee29922c5563a7fa64e65bbd1431a48cbc1f0a7fa5fa57c1

    • Size

      120KB

    • MD5

      8322cc372aaa560cc766c43721158a8a

    • SHA1

      571e7ab67b634137d9720471042115e2b86acb3a

    • SHA256

      fbfd3c8ce00170e1ee29922c5563a7fa64e65bbd1431a48cbc1f0a7fa5fa57c1

    • SHA512

      20850c5724c073f3680c9191d1b35623848a20404f10068aa5184b5ceb987adcd0a0e57211028740d48b3f139273871854def5dc8b47fec77709e2d83092b8a8

    • SSDEEP

      1536:Z6CcQOLfUdmRoBDVYV9iMdFqB3yA+5YeEsaKNeIVZ+nfjXBxq65PgW5nYnt47b:ZTfrioMaBSYeeKcIVMnrRk61dY+

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks