Overview

overview

8

Static

static

dad1010a9c...fc.exe

windows7-x64

8

dad1010a9c...fc.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dad1010a9ca877e2ddbef25079a9a4f18e524bdd5bbcbe91b7ea00c68a22a5fc

  • Size

    39KB

  • Sample

    221206-qlqz6sbg34

  • MD5

    8fff0160e82ca7433d1f4ffd3909c9ed

  • SHA1

    cb0fbbea06a4527e5b45b3b77b31af3b7b44293d

  • SHA256

    dad1010a9ca877e2ddbef25079a9a4f18e524bdd5bbcbe91b7ea00c68a22a5fc

  • SHA512

    895464b0a63f1cd920f14e9747de0f57435235ae3fe708b156fbea7c5d55cd98adeece7f9cf93fcd1af474e14d9e71994fec4b6df4811bc7f459830bd3065b43

  • SSDEEP

    768:SzLoYj/s3MY2C162DG9pFz6uEpYJgiMgIf2aNBIFZCzccx5BXPow:0MYQ3n2WTczxqYJgHf2aNBSZ5cx5FB

Score
8/10

Malware Config

Targets

    • Target

      dad1010a9ca877e2ddbef25079a9a4f18e524bdd5bbcbe91b7ea00c68a22a5fc

    • Size

      39KB

    • MD5

      8fff0160e82ca7433d1f4ffd3909c9ed

    • SHA1

      cb0fbbea06a4527e5b45b3b77b31af3b7b44293d

    • SHA256

      dad1010a9ca877e2ddbef25079a9a4f18e524bdd5bbcbe91b7ea00c68a22a5fc

    • SHA512

      895464b0a63f1cd920f14e9747de0f57435235ae3fe708b156fbea7c5d55cd98adeece7f9cf93fcd1af474e14d9e71994fec4b6df4811bc7f459830bd3065b43

    • SSDEEP

      768:SzLoYj/s3MY2C162DG9pFz6uEpYJgiMgIf2aNBIFZCzccx5BXPow:0MYQ3n2WTczxqYJgHf2aNBSZ5cx5FB

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks