Overview

overview

8

Static

static

eca1b65734...a9.exe

windows7-x64

8

eca1b65734...a9.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    eca1b65734e2eef391f1622facf76f38f231b6deff31b86d021b7d9e5a80bfa9

  • Size

    81KB

  • Sample

    221206-tz97ragg7v

  • MD5

    ab70e7670bc0dbe91806e569a8145a91

  • SHA1

    349445c04c98132f300d960f93bacf5b825b1004

  • SHA256

    eca1b65734e2eef391f1622facf76f38f231b6deff31b86d021b7d9e5a80bfa9

  • SHA512

    1070d0050ce7af8bf1eb12262460bc356a458c7ebc5262078a6aae1ea967ad5e6e7beed36803cd0b66373e439a6d8d0a5757c8a31b363042b4bc753e7a6df5bc

  • SSDEEP

    1536:eg6jjjjjjOvvvvq884kJwwVeVeL1v4VpdsDmr5Oo1/c0bg:eBjjjjjj988ewkkL2LCzoJ1g

Score
8/10
persistence

Malware Config

Targets

    • Target

      eca1b65734e2eef391f1622facf76f38f231b6deff31b86d021b7d9e5a80bfa9

    • Size

      81KB

    • MD5

      ab70e7670bc0dbe91806e569a8145a91

    • SHA1

      349445c04c98132f300d960f93bacf5b825b1004

    • SHA256

      eca1b65734e2eef391f1622facf76f38f231b6deff31b86d021b7d9e5a80bfa9

    • SHA512

      1070d0050ce7af8bf1eb12262460bc356a458c7ebc5262078a6aae1ea967ad5e6e7beed36803cd0b66373e439a6d8d0a5757c8a31b363042b4bc753e7a6df5bc

    • SSDEEP

      1536:eg6jjjjjjOvvvvq884kJwwVeVeL1v4VpdsDmr5Oo1/c0bg:eBjjjjjj988ewkkL2LCzoJ1g

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks