Overview

overview

8

Static

static

e6ffbf04a8...df.exe

windows7-x64

8

e6ffbf04a8...df.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df

  • Size

    310KB

  • Sample

    221206-avvfysbf44

  • MD5

    15a49ad74093f260905aeebd86ab54f3

  • SHA1

    76d4d1d1bcbb24fcd9b4eb5c8e713a076f67b988

  • SHA256

    e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df

  • SHA512

    70763d97c517f095ffbf3d1ed85987724a39867ce26fdd8483115293e16f4d4814deffd8e25c32b22ae1f2f3e0432771d60fd19018da598580fb81c071038ff9

  • SSDEEP

    6144:6wTTu9g4DQC6ziRo0sYXkRDm5TsCQIaNEN4xxgBnixuqFsE6a9:vGpF6K1d8UIIaNniBnnq+na9

Score
8/10
persistence

Malware Config

Targets

    • Target

      e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df

    • Size

      310KB

    • MD5

      15a49ad74093f260905aeebd86ab54f3

    • SHA1

      76d4d1d1bcbb24fcd9b4eb5c8e713a076f67b988

    • SHA256

      e6ffbf04a8fe0d0e68246cf33c5fdcc7bbe210f5bad580ab455c81da538d64df

    • SHA512

      70763d97c517f095ffbf3d1ed85987724a39867ce26fdd8483115293e16f4d4814deffd8e25c32b22ae1f2f3e0432771d60fd19018da598580fb81c071038ff9

    • SSDEEP

      6144:6wTTu9g4DQC6ziRo0sYXkRDm5TsCQIaNEN4xxgBnixuqFsE6a9:vGpF6K1d8UIIaNniBnnq+na9

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks