Overview

overview

10

Static

static

ec96a21187...4d.exe

windows7-x64

10

ec96a21187...4d.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec96a21187dca7ff35240385c9d3dd700568a12256929a07a9209627de49b64d

  • Size

    120KB

  • Sample

    221204-pnngdsdb8w

  • MD5

    cdc3fc041bb65f940180b54cc69ed0ec

  • SHA1

    b4298e54982f1aaf2d5ce1ce001c9f6c995f43aa

  • SHA256

    ec96a21187dca7ff35240385c9d3dd700568a12256929a07a9209627de49b64d

  • SHA512

    25a7a5792c351ab37d1e4c7525a5163b2eff81b1d5f4495acca21096c812d286686596b06f07c9c11ce1e3800357b1eefdfe719a66e8caa13dfff5f5d78402f4

  • SSDEEP

    1536:OS1pLWAit7J8/Ov9wPjyaKZRhFDZn/Gvh/BpxjgyNHG03tmhsexphNAwr90:JaF7JbkrkRhFln+vNxj7G03UbNn0

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ec96a21187dca7ff35240385c9d3dd700568a12256929a07a9209627de49b64d

    • Size

      120KB

    • MD5

      cdc3fc041bb65f940180b54cc69ed0ec

    • SHA1

      b4298e54982f1aaf2d5ce1ce001c9f6c995f43aa

    • SHA256

      ec96a21187dca7ff35240385c9d3dd700568a12256929a07a9209627de49b64d

    • SHA512

      25a7a5792c351ab37d1e4c7525a5163b2eff81b1d5f4495acca21096c812d286686596b06f07c9c11ce1e3800357b1eefdfe719a66e8caa13dfff5f5d78402f4

    • SSDEEP

      1536:OS1pLWAit7J8/Ov9wPjyaKZRhFDZn/Gvh/BpxjgyNHG03tmhsexphNAwr90:JaF7JbkrkRhFln+vNxj7G03UbNn0

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks