Overview

overview

8

Static

static

e50c207ce9...36.exe

windows7-x64

8

e50c207ce9...36.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236

  • Size

    217KB

  • Sample

    221204-qm17jace65

  • MD5

    41f5a09c260f1c53f7d36077fbd61586

  • SHA1

    3708764abb41ee06a7f3d78da8fd6144daa8c0d6

  • SHA256

    e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236

  • SHA512

    fcbb9cdd6ea5b7ebe6027222f50607932311cdd016b49c5d09c0b7c08b3dc717b8fcee81319092e144179a94132771829003a0fb8e481f8904227980ccc3ad0c

  • SSDEEP

    6144:0bH3MhU6sM8fP6SPqRZto4fcvg+xh5Jfq:QH3MhU63SqtbX+

Score
8/10

Malware Config

Targets

    • Target

      e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236

    • Size

      217KB

    • MD5

      41f5a09c260f1c53f7d36077fbd61586

    • SHA1

      3708764abb41ee06a7f3d78da8fd6144daa8c0d6

    • SHA256

      e50c207ce98d62f2a2abea9651e3baeccebef28d6f0e55d8df34ea63a742d236

    • SHA512

      fcbb9cdd6ea5b7ebe6027222f50607932311cdd016b49c5d09c0b7c08b3dc717b8fcee81319092e144179a94132771829003a0fb8e481f8904227980ccc3ad0c

    • SSDEEP

      6144:0bH3MhU6sM8fP6SPqRZto4fcvg+xh5Jfq:QH3MhU63SqtbX+

    Score
    8/10

    • Executes dropped EXE

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks