Overview

overview

8

Static

static

5349b8aee9...63.exe

windows7-x64

8

5349b8aee9...63.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5349b8aee94317e9fa0ba083bb51791849f62e3c9774167b34235795fbe04163

  • Size

    356KB

  • Sample

    221205-rvtcbsce7y

  • MD5

    07ecdcfe9dbee42432d248a23b3a4990

  • SHA1

    587e70c00ede0b7447c4cebeb5d1ff96a3b16570

  • SHA256

    5349b8aee94317e9fa0ba083bb51791849f62e3c9774167b34235795fbe04163

  • SHA512

    c25cae947654eb5eacd5114ee63b4612fb122fd773c6b6e5eab662859b4f8213e1224c7ed75ab0fc160f3b4313c27e29490d4c6f510e7cfc732e3fc1094a9eb5

  • SSDEEP

    6144:7vbx8YZKNGiQBVwF8OGLhbgzru7h6H1TIf0:7xZi7QBuuOGLhG6Om0

Score
8/10
persistence

Malware Config

Targets

    • Target

      5349b8aee94317e9fa0ba083bb51791849f62e3c9774167b34235795fbe04163

    • Size

      356KB

    • MD5

      07ecdcfe9dbee42432d248a23b3a4990

    • SHA1

      587e70c00ede0b7447c4cebeb5d1ff96a3b16570

    • SHA256

      5349b8aee94317e9fa0ba083bb51791849f62e3c9774167b34235795fbe04163

    • SHA512

      c25cae947654eb5eacd5114ee63b4612fb122fd773c6b6e5eab662859b4f8213e1224c7ed75ab0fc160f3b4313c27e29490d4c6f510e7cfc732e3fc1094a9eb5

    • SSDEEP

      6144:7vbx8YZKNGiQBVwF8OGLhbgzru7h6H1TIf0:7xZi7QBuuOGLhG6Om0

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks