Overview

overview

8

Static

static

ca972bb4ef...9d.exe

windows7-x64

8

ca972bb4ef...9d.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ca972bb4ef5d47395c8516cc294287b02058d88fb25d043b39567e63e62e289d

  • Size

    176KB

  • Sample

    221206-xjhz4sdf89

  • MD5

    4cf9434cfbb8f41fa809587f52fbf150

  • SHA1

    6dae9d05d88e7053d5aa6928c7a429ace3991462

  • SHA256

    ca972bb4ef5d47395c8516cc294287b02058d88fb25d043b39567e63e62e289d

  • SHA512

    7c525986f53f384e3a5ca3a3a8249624d2f6326c767d3295044c881bc44be5e438eaeb700835398fd1bcbf63310627e3335f36d708795edf2708d712ae739d4b

  • SSDEEP

    1536:GVW+aI4kSjI7HGdZODxyATpnQ/NZ2+LGNtYLdyGdob3jAx+cu3Ew+OglAOwhCqF:GI24ljcEOQOuNURtgyGSb3T333ngC9F

Score
8/10
persistence

Malware Config

Targets

    • Target

      ca972bb4ef5d47395c8516cc294287b02058d88fb25d043b39567e63e62e289d

    • Size

      176KB

    • MD5

      4cf9434cfbb8f41fa809587f52fbf150

    • SHA1

      6dae9d05d88e7053d5aa6928c7a429ace3991462

    • SHA256

      ca972bb4ef5d47395c8516cc294287b02058d88fb25d043b39567e63e62e289d

    • SHA512

      7c525986f53f384e3a5ca3a3a8249624d2f6326c767d3295044c881bc44be5e438eaeb700835398fd1bcbf63310627e3335f36d708795edf2708d712ae739d4b

    • SSDEEP

      1536:GVW+aI4kSjI7HGdZODxyATpnQ/NZ2+LGNtYLdyGdob3jAx+cu3Ew+OglAOwhCqF:GI24ljcEOQOuNURtgyGSb3T333ngC9F

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks