Overview

overview

8

Static

static

698c3da32d...64.exe

windows7-x64

8

698c3da32d...64.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564

  • Size

    309KB

  • Sample

    221206-t7dthshc9t

  • MD5

    696066b8e2cfca3cffa4334349719adf

  • SHA1

    8d51f6af30481afdd2d6d1408ecb15a1dbe7eb7a

  • SHA256

    698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564

  • SHA512

    bc6f869cec779aad191271a94b125292afe27f393b21668f40a271de7408019973ea777510c6e129c26f94d2e92d7c8412ac42bbe76995b2ac17e9cff4deb337

  • SSDEEP

    6144:TmqxIWZP838yPUF6aZRBJ7zjDz31onYmkQdS6U06Ysj8OuJ3+bsTN:BxIWlI8tFNR3DzFonYmNijBauw

Score
8/10
persistence

Malware Config

Targets

    • Target

      698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564

    • Size

      309KB

    • MD5

      696066b8e2cfca3cffa4334349719adf

    • SHA1

      8d51f6af30481afdd2d6d1408ecb15a1dbe7eb7a

    • SHA256

      698c3da32d811aa5462d19c3283dcdb79904e3f2af8492951a15409cfb77b564

    • SHA512

      bc6f869cec779aad191271a94b125292afe27f393b21668f40a271de7408019973ea777510c6e129c26f94d2e92d7c8412ac42bbe76995b2ac17e9cff4deb337

    • SSDEEP

      6144:TmqxIWZP838yPUF6aZRBJ7zjDz31onYmkQdS6U06Ysj8OuJ3+bsTN:BxIWlI8tFNR3DzFonYmNijBauw

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks