Overview

overview

8

Static

static

dd0ae85b68...e3.exe

windows7-x64

8

dd0ae85b68...e3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd0ae85b6880e6ca969e9914a6e87924422caee1c5d120476a391e792fcfb2e3

  • Size

    289KB

  • Sample

    221206-yrd7kacb4t

  • MD5

    eb489e782d148f5c3b26719aea100cfd

  • SHA1

    fecb87fb718c7afd95338a32e8b8c1054ae318d1

  • SHA256

    dd0ae85b6880e6ca969e9914a6e87924422caee1c5d120476a391e792fcfb2e3

  • SHA512

    625f548699f7ad689a8f3906c45072d7a16794d82104073852864c8888a741903668b430d922f57f66d0554a6dc60407921d1b44487c4e3190f39b1a17a78527

  • SSDEEP

    6144:xbsRhlHPETniv6iatoAKCYeX4XSSARzRKAWtmcxc+dWLxiqUo+4X:xbsRhlHPETniv6iatoAKCYA4XSSARFKw

Score
8/10
persistence

Malware Config

Targets

    • Target

      dd0ae85b6880e6ca969e9914a6e87924422caee1c5d120476a391e792fcfb2e3

    • Size

      289KB

    • MD5

      eb489e782d148f5c3b26719aea100cfd

    • SHA1

      fecb87fb718c7afd95338a32e8b8c1054ae318d1

    • SHA256

      dd0ae85b6880e6ca969e9914a6e87924422caee1c5d120476a391e792fcfb2e3

    • SHA512

      625f548699f7ad689a8f3906c45072d7a16794d82104073852864c8888a741903668b430d922f57f66d0554a6dc60407921d1b44487c4e3190f39b1a17a78527

    • SSDEEP

      6144:xbsRhlHPETniv6iatoAKCYeX4XSSARzRKAWtmcxc+dWLxiqUo+4X:xbsRhlHPETniv6iatoAKCYA4XSSARFKw

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks