Overview

overview

8

Static

static

a59f5769ef...38.exe

windows7-x64

8

a59f5769ef...38.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a59f5769ef80c9af9a0186653b49121b5d505ba18d07d5710e0d7b375e3cf738

  • Size

    426KB

  • Sample

    221205-l29d8shc78

  • MD5

    f99e6d0a7e88589e71a0f5484493efa3

  • SHA1

    b366dcb0ec14fc90be705e0baf5a024446c17754

  • SHA256

    a59f5769ef80c9af9a0186653b49121b5d505ba18d07d5710e0d7b375e3cf738

  • SHA512

    7626e72d720b106c59747c74ec39421a428566b0d42d92c9d55c3e5f683247d681705043f92f691601bfd2aaa67a367002e7cb94057454b2af272dfe9824c339

  • SSDEEP

    6144:yQwkIXrueYIYsIW4VAYsOYeCEM7YTrLIqAWHfEFAb3bUj:yE2rf3cV+cxTgqv8Fsoj

Score
8/10
persistence

Malware Config

Targets

    • Target

      a59f5769ef80c9af9a0186653b49121b5d505ba18d07d5710e0d7b375e3cf738

    • Size

      426KB

    • MD5

      f99e6d0a7e88589e71a0f5484493efa3

    • SHA1

      b366dcb0ec14fc90be705e0baf5a024446c17754

    • SHA256

      a59f5769ef80c9af9a0186653b49121b5d505ba18d07d5710e0d7b375e3cf738

    • SHA512

      7626e72d720b106c59747c74ec39421a428566b0d42d92c9d55c3e5f683247d681705043f92f691601bfd2aaa67a367002e7cb94057454b2af272dfe9824c339

    • SSDEEP

      6144:yQwkIXrueYIYsIW4VAYsOYeCEM7YTrLIqAWHfEFAb3bUj:yE2rf3cV+cxTgqv8Fsoj

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks