Overview

overview

8

Static

static

fa7024d364...4f.exe

windows7-x64

8

fa7024d364...4f.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa7024d364d5e55b264682960cf0807d1ded4e917ca8614c4f2d027990ae5b4f

  • Size

    351KB

  • Sample

    221204-mtc7habe52

  • MD5

    20338f738bd066961ae639e0820c6f5e

  • SHA1

    a7945be15e1cceb9cfc70efb6956951ede4b1eb0

  • SHA256

    fa7024d364d5e55b264682960cf0807d1ded4e917ca8614c4f2d027990ae5b4f

  • SHA512

    1fe569ce8ec1a32efd65e662a2311e142acd0bf818b9c3f3a43f2725010d5227b23a45d6d7eb1871def1270fb6ad6a111246da4033e47a01058d1148517c7b57

  • SSDEEP

    6144:Z3c4cg0RO2MEzoqeAYd2eGBysYgeOnVvZ33rXjIzPD:ZiBTMbAm2tBxeOnVvZHgzPD

Score
8/10
persistence

Malware Config

Targets

    • Target

      fa7024d364d5e55b264682960cf0807d1ded4e917ca8614c4f2d027990ae5b4f

    • Size

      351KB

    • MD5

      20338f738bd066961ae639e0820c6f5e

    • SHA1

      a7945be15e1cceb9cfc70efb6956951ede4b1eb0

    • SHA256

      fa7024d364d5e55b264682960cf0807d1ded4e917ca8614c4f2d027990ae5b4f

    • SHA512

      1fe569ce8ec1a32efd65e662a2311e142acd0bf818b9c3f3a43f2725010d5227b23a45d6d7eb1871def1270fb6ad6a111246da4033e47a01058d1148517c7b57

    • SSDEEP

      6144:Z3c4cg0RO2MEzoqeAYd2eGBysYgeOnVvZ33rXjIzPD:ZiBTMbAm2tBxeOnVvZHgzPD

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks