Overview

overview

8

Static

static

fc55ba323f...40.exe

windows7-x64

8

fc55ba323f...40.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc55ba323f53b9cad602edfc2df732eb5d0c2892cc5de63a7ce297e23f475440

  • Size

    68KB

  • Sample

    221204-mlareaah23

  • MD5

    fd5014046fb4f39894ac90a5aa248b6e

  • SHA1

    e7287296922698f5ab7f599c9638427d1469d0c8

  • SHA256

    fc55ba323f53b9cad602edfc2df732eb5d0c2892cc5de63a7ce297e23f475440

  • SHA512

    a6d7b155bba8dbb48febfa777d44dde48401de9cdefac498bb9ce1e2768c0c904f79a6c5088b804a99960f56e90253870a27f7022827103abfe229a92d2b1cb5

  • SSDEEP

    1536:r1BvK2hM46fGBCzSfNNI6yx8Hoh3eypmrYbwWo6:r1BvK7pmCzSlNILr7mrl6

Score
8/10

Malware Config

Targets

    • Target

      fc55ba323f53b9cad602edfc2df732eb5d0c2892cc5de63a7ce297e23f475440

    • Size

      68KB

    • MD5

      fd5014046fb4f39894ac90a5aa248b6e

    • SHA1

      e7287296922698f5ab7f599c9638427d1469d0c8

    • SHA256

      fc55ba323f53b9cad602edfc2df732eb5d0c2892cc5de63a7ce297e23f475440

    • SHA512

      a6d7b155bba8dbb48febfa777d44dde48401de9cdefac498bb9ce1e2768c0c904f79a6c5088b804a99960f56e90253870a27f7022827103abfe229a92d2b1cb5

    • SSDEEP

      1536:r1BvK2hM46fGBCzSfNNI6yx8Hoh3eypmrYbwWo6:r1BvK7pmCzSlNILr7mrl6

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks