Overview

overview

8

Static

static

9af55dfb9f...ef.exe

windows7-x64

8

9af55dfb9f...ef.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9af55dfb9ff5ce043d8adaf22f5281ee3cea880ff8a014c2c2c93b6b78b3e6ef

  • Size

    38KB

  • Sample

    221205-nf56ssdh92

  • MD5

    8cbd84fd8e3087175d00c46398126b41

  • SHA1

    111d6233e81649318c36319bab51e5552fe87a43

  • SHA256

    9af55dfb9ff5ce043d8adaf22f5281ee3cea880ff8a014c2c2c93b6b78b3e6ef

  • SHA512

    987e3a67b3d99d4e951a05ca4c123c15ff926ec79418d3200952d64ebe43041a7819771a50818d9a399f846fd8053b7df0b63c46d68a3c7bdd319b489ca64e8e

  • SSDEEP

    768:cD8Mku/08vChRzSbJ/iB1ljyRFQPeB1Qi6YyJVQQeDlV8T3+cxcGB:ABkuM1hR2g18CeB1QMyJVQQeD4vxcGB

Score
8/10

Malware Config

Targets

    • Target

      9af55dfb9ff5ce043d8adaf22f5281ee3cea880ff8a014c2c2c93b6b78b3e6ef

    • Size

      38KB

    • MD5

      8cbd84fd8e3087175d00c46398126b41

    • SHA1

      111d6233e81649318c36319bab51e5552fe87a43

    • SHA256

      9af55dfb9ff5ce043d8adaf22f5281ee3cea880ff8a014c2c2c93b6b78b3e6ef

    • SHA512

      987e3a67b3d99d4e951a05ca4c123c15ff926ec79418d3200952d64ebe43041a7819771a50818d9a399f846fd8053b7df0b63c46d68a3c7bdd319b489ca64e8e

    • SSDEEP

      768:cD8Mku/08vChRzSbJ/iB1ljyRFQPeB1Qi6YyJVQQeDlV8T3+cxcGB:ABkuM1hR2g18CeB1QMyJVQQeD4vxcGB

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks