Overview

overview

8

Static

static

914d5861e5...00.exe

windows7-x64

8

914d5861e5...00.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    914d5861e5da8acd96bc58561fc6f9d6c6f8e7dc8c103136367e68125438e400

  • Size

    91KB

  • Sample

    221206-k9xjzagd7x

  • MD5

    8bf3e946eb32c142cbb6256a702c904a

  • SHA1

    510610aadcb47ccc7a703468b6187169b241e004

  • SHA256

    914d5861e5da8acd96bc58561fc6f9d6c6f8e7dc8c103136367e68125438e400

  • SHA512

    dfd7369a24e01b786cb58c19fd1de341b779085594bde48ee11d3f7c3574a2e919e961463d0e5354423c55d19db72ebc2a3c57b716096e242f4ff98d1e3c2829

  • SSDEEP

    1536:ZiDLG7BYp+SZjBHdEhIxBtS5Q5grdU3+kNS9Y/bmF6uIo6nX7mNeomBZzJ1J+B0X:ZifEwPHdEaaQ5g2Ow2Y/bmF65NCNeoml

Score
8/10

Malware Config

Targets

    • Target

      914d5861e5da8acd96bc58561fc6f9d6c6f8e7dc8c103136367e68125438e400

    • Size

      91KB

    • MD5

      8bf3e946eb32c142cbb6256a702c904a

    • SHA1

      510610aadcb47ccc7a703468b6187169b241e004

    • SHA256

      914d5861e5da8acd96bc58561fc6f9d6c6f8e7dc8c103136367e68125438e400

    • SHA512

      dfd7369a24e01b786cb58c19fd1de341b779085594bde48ee11d3f7c3574a2e919e961463d0e5354423c55d19db72ebc2a3c57b716096e242f4ff98d1e3c2829

    • SSDEEP

      1536:ZiDLG7BYp+SZjBHdEhIxBtS5Q5grdU3+kNS9Y/bmF6uIo6nX7mNeomBZzJ1J+B0X:ZifEwPHdEaaQ5g2Ow2Y/bmF65NCNeoml

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks