Overview

overview

8

Static

static

f8be25e77a...15.dll

windows7-x64

8

f8be25e77a...15.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8be25e77aaa73c5c7c3c7345c7881ee2a3f76d7233388cca41b448219761e15

  • Size

    68KB

  • Sample

    221204-m1ad7afh2v

  • MD5

    7c0e6313c56b5bc829bc59c4829871c2

  • SHA1

    64a27b5e46e4406ef488a23304ceea9a70d833c9

  • SHA256

    f8be25e77aaa73c5c7c3c7345c7881ee2a3f76d7233388cca41b448219761e15

  • SHA512

    833479990c05344e8d833a9a07ebf5e87a8ccd00e0dae0d86e82f08050fec7190462e654652b8839596f2ce9b9adf918e2c400d2117d86b0d092018e89202fce

  • SSDEEP

    768:LtRZ0NkZKDHOZcBHCE2a/ZOh+xqQKzvu+avgKvo9jd9cDgupNNpQcJJ9N0h/f4A/:JR2vOyTb/M+nKzvuIOo1f4

Score
8/10
persistence

Malware Config

Targets

    • Target

      f8be25e77aaa73c5c7c3c7345c7881ee2a3f76d7233388cca41b448219761e15

    • Size

      68KB

    • MD5

      7c0e6313c56b5bc829bc59c4829871c2

    • SHA1

      64a27b5e46e4406ef488a23304ceea9a70d833c9

    • SHA256

      f8be25e77aaa73c5c7c3c7345c7881ee2a3f76d7233388cca41b448219761e15

    • SHA512

      833479990c05344e8d833a9a07ebf5e87a8ccd00e0dae0d86e82f08050fec7190462e654652b8839596f2ce9b9adf918e2c400d2117d86b0d092018e89202fce

    • SSDEEP

      768:LtRZ0NkZKDHOZcBHCE2a/ZOh+xqQKzvu+avgKvo9jd9cDgupNNpQcJJ9N0h/f4A/:JR2vOyTb/M+nKzvuIOo1f4

    Score
    8/10
    persistence

    • Sets DLL path for service in the registry

      persistence

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks