Overview

overview

8

Static

static

winprofile

windows7-x64

8

winprofile

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7fe99d1024e3d329972135bc3f1121fa9ecafbee98a4c2cd31e82dc786c78ca6

  • Size

    221KB

  • Sample

    221218-18fstsgg8z

  • MD5

    31ffe86465095a5f2f7b8fa6fc059bda

  • SHA1

    b2f00d382fb5733e6c274ab0875b70801abf66dd

  • SHA256

    7fe99d1024e3d329972135bc3f1121fa9ecafbee98a4c2cd31e82dc786c78ca6

  • SHA512

    f807b10579dbdd46cb5a3d19f9af7312a841e55a17bcf9502f8fc7c5f65a7819670609fe5f80464b4898b76786b28eb53d385d3b66cd8ecc9045ffb47f513467

  • SSDEEP

    6144:1ae46TfHHUBca1I017Fixzr6/pAqC55vw:t46TfHnay0pFix3w

Score
8/10
persistence

Malware Config

Targets

    • Target

      7fe99d1024e3d329972135bc3f1121fa9ecafbee98a4c2cd31e82dc786c78ca6

    • Size

      221KB

    • MD5

      31ffe86465095a5f2f7b8fa6fc059bda

    • SHA1

      b2f00d382fb5733e6c274ab0875b70801abf66dd

    • SHA256

      7fe99d1024e3d329972135bc3f1121fa9ecafbee98a4c2cd31e82dc786c78ca6

    • SHA512

      f807b10579dbdd46cb5a3d19f9af7312a841e55a17bcf9502f8fc7c5f65a7819670609fe5f80464b4898b76786b28eb53d385d3b66cd8ecc9045ffb47f513467

    • SSDEEP

      6144:1ae46TfHHUBca1I017Fixzr6/pAqC55vw:t46TfHnay0pFix3w

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks