Overview

overview

8

Static

static

9e5668d4e8...f6.exe

windows7-x64

8

9e5668d4e8...f6.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e5668d4e8a58777225708f10409ee7177cd6395737f5b0160e6217ee4035ff6

  • Size

    35KB

  • Sample

    221204-ny1n2afb58

  • MD5

    036340b9e64a4a49c442a23d6e4ee5a8

  • SHA1

    33a64b0b2e0608468aa78fc3ea942de24fd2b5d0

  • SHA256

    9e5668d4e8a58777225708f10409ee7177cd6395737f5b0160e6217ee4035ff6

  • SHA512

    7658cf5acc97ae1e0180c469a1cd87dd4b67f5777effdf0ee681ce15d22bad3611c5759439ba576c8851f18c8c7141d50a36c76ea2a7fd3a942f4cb7fa124c99

  • SSDEEP

    384:x9RlQG13BLgexxxaR0O834rfmAT/5bcicoAVmaqsj7T0oY7cQ67oJk1Ziwf6hycF:TQGpmes+olciha/sw8cF6srxLwN97jT

Score
8/10

Malware Config

Targets

    • Target

      9e5668d4e8a58777225708f10409ee7177cd6395737f5b0160e6217ee4035ff6

    • Size

      35KB

    • MD5

      036340b9e64a4a49c442a23d6e4ee5a8

    • SHA1

      33a64b0b2e0608468aa78fc3ea942de24fd2b5d0

    • SHA256

      9e5668d4e8a58777225708f10409ee7177cd6395737f5b0160e6217ee4035ff6

    • SHA512

      7658cf5acc97ae1e0180c469a1cd87dd4b67f5777effdf0ee681ce15d22bad3611c5759439ba576c8851f18c8c7141d50a36c76ea2a7fd3a942f4cb7fa124c99

    • SSDEEP

      384:x9RlQG13BLgexxxaR0O834rfmAT/5bcicoAVmaqsj7T0oY7cQ67oJk1Ziwf6hycF:TQGpmes+olciha/sw8cF6srxLwN97jT

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks