Overview

overview

6

Static

static

dd3e02859a...f4.exe

windows7-x64

5

dd3e02859a...f4.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd3e02859a4efba808d74a9c8a1b2e19f39897426cde779ff4f023e5044adcf4

  • Size

    109KB

  • Sample

    221207-d8vwesef41

  • MD5

    4f79481d16930684cfa3df943444e036

  • SHA1

    c1fa078b05aa7a64c30a0c549b127a49f8eed5a9

  • SHA256

    dd3e02859a4efba808d74a9c8a1b2e19f39897426cde779ff4f023e5044adcf4

  • SHA512

    18594906efa25e46a881d6d19fe2eabf2cda92a033ca054aa48b5e9c08388afe50222c43ace0a76906b4558e34fe5349efd93b1df9abac69fa5901309a080c1c

  • SSDEEP

    1536:AfEFE5T8bRVs1yMmDi3WE//YehLXVc4FWkckxvC4V7MfrgkA:wZjmDUz/gOVc4FBLlAfrfA

Score
6/10
microsoftpersistencephishing

Malware Config

Targets

    • Target

      dd3e02859a4efba808d74a9c8a1b2e19f39897426cde779ff4f023e5044adcf4

    • Size

      109KB

    • MD5

      4f79481d16930684cfa3df943444e036

    • SHA1

      c1fa078b05aa7a64c30a0c549b127a49f8eed5a9

    • SHA256

      dd3e02859a4efba808d74a9c8a1b2e19f39897426cde779ff4f023e5044adcf4

    • SHA512

      18594906efa25e46a881d6d19fe2eabf2cda92a033ca054aa48b5e9c08388afe50222c43ace0a76906b4558e34fe5349efd93b1df9abac69fa5901309a080c1c

    • SSDEEP

      1536:AfEFE5T8bRVs1yMmDi3WE//YehLXVc4FWkckxvC4V7MfrgkA:wZjmDUz/gOVc4FBLlAfrfA

    Score
    6/10
    microsoftpersistencephishing

    • Adds Run key to start application

      persistence

    • Detected potential entity reuse from brand microsoft.

      phishingmicrosoft

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks