Overview

overview

8

Static

static

bac8bb4f0a...aa.exe

windows7-x64

8

bac8bb4f0a...aa.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    bac8bb4f0a2f427d3d06a791819a5221414fde30ffedc9c1fde48ed73efd61aa

  • Size

    305KB

  • Sample

    221206-xa7l4sda63

  • MD5

    1e34e2af87f61a80b831266d85770590

  • SHA1

    9c97291f4276ba467afbd63aca2718cbe4e3298d

  • SHA256

    bac8bb4f0a2f427d3d06a791819a5221414fde30ffedc9c1fde48ed73efd61aa

  • SHA512

    46dbf574f0b1e89a5144afacb5948e10f9a263e97fb0a230f3c87c951e3ebe196c9e81d902f900e7ee9e15528484928f082d755ddb6cfb23453f664d59ee343e

  • SSDEEP

    6144:H15U5dDPnPsHhChE029DhQLJVkKwkLY6nwLAGgNWEHyXJlvTTKUCzLHIOc6ypJ+:3UPPnPGTtqJxlwWZSXfvT2Us2H

Score
8/10
persistence

Malware Config

Targets

    • Target

      bac8bb4f0a2f427d3d06a791819a5221414fde30ffedc9c1fde48ed73efd61aa

    • Size

      305KB

    • MD5

      1e34e2af87f61a80b831266d85770590

    • SHA1

      9c97291f4276ba467afbd63aca2718cbe4e3298d

    • SHA256

      bac8bb4f0a2f427d3d06a791819a5221414fde30ffedc9c1fde48ed73efd61aa

    • SHA512

      46dbf574f0b1e89a5144afacb5948e10f9a263e97fb0a230f3c87c951e3ebe196c9e81d902f900e7ee9e15528484928f082d755ddb6cfb23453f664d59ee343e

    • SSDEEP

      6144:H15U5dDPnPsHhChE029DhQLJVkKwkLY6nwLAGgNWEHyXJlvTTKUCzLHIOc6ypJ+:3UPPnPGTtqJxlwWZSXfvT2Us2H

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks