Overview

overview

8

Static

static

aadc80ff6c...2b.exe

windows7-x64

8

aadc80ff6c...2b.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    aadc80ff6ce7f81f2fa7f0d56b1a853a323cbeb9528c3d6f4bd78893eb27702b

  • Size

    308KB

  • Sample

    221205-le78nafb72

  • MD5

    07c1b2a5e349d6ea7113937644b58ed0

  • SHA1

    30752166ba742fab155b050be90fab3f3dc6b83d

  • SHA256

    aadc80ff6ce7f81f2fa7f0d56b1a853a323cbeb9528c3d6f4bd78893eb27702b

  • SHA512

    2527e7408b36c8a7de847e8d3900a7a321a1d40db73cfe35c1f77d2e4d771cf2d7abe311701c9895feabdbf9cb7dabe8c887403c0988a139001c11d4ffa3bba8

  • SSDEEP

    6144:G1QcP+wbqVnxxmtU61bfQByCUJ84hIP8GauEgh:G1fJb0n6uibfK0IEGfEgh

Score
8/10
persistence

Malware Config

Targets

    • Target

      aadc80ff6ce7f81f2fa7f0d56b1a853a323cbeb9528c3d6f4bd78893eb27702b

    • Size

      308KB

    • MD5

      07c1b2a5e349d6ea7113937644b58ed0

    • SHA1

      30752166ba742fab155b050be90fab3f3dc6b83d

    • SHA256

      aadc80ff6ce7f81f2fa7f0d56b1a853a323cbeb9528c3d6f4bd78893eb27702b

    • SHA512

      2527e7408b36c8a7de847e8d3900a7a321a1d40db73cfe35c1f77d2e4d771cf2d7abe311701c9895feabdbf9cb7dabe8c887403c0988a139001c11d4ffa3bba8

    • SSDEEP

      6144:G1QcP+wbqVnxxmtU61bfQByCUJ84hIP8GauEgh:G1fJb0n6uibfK0IEGfEgh

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks