Overview

overview

8

Static

static

sherack.exe

windows7-x64

8

sherack.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sherack.exe

  • Size

    268KB

  • Sample

    230111-s5b2gadd56

  • MD5

    89207e12f1f61594121f8b2e0bb9ff24

  • SHA1

    6e51e8953ca7e102edca4bd5d8c5481a2e83054e

  • SHA256

    0bcaaad38d8ff5881dae662a481b5f64bfeb71a40bf27d61a35889e7667ce44a

  • SHA512

    186f20113a0986d34e2a5f6a5a8daebae8f023bb8dffcb6db840a82bd1eee9889858629c64207fd30b520695358464903a299c4b1183ec332cc35db73cddd29a

  • SSDEEP

    6144:MYa69qoOJjNMKFSfJvFB6/8UtLkp8JOijJw8H:MYmMWSBvzGtIGOiVH

Score
8/10
persistence

Malware Config

Targets

    • Target

      sherack.exe

    • Size

      268KB

    • MD5

      89207e12f1f61594121f8b2e0bb9ff24

    • SHA1

      6e51e8953ca7e102edca4bd5d8c5481a2e83054e

    • SHA256

      0bcaaad38d8ff5881dae662a481b5f64bfeb71a40bf27d61a35889e7667ce44a

    • SHA512

      186f20113a0986d34e2a5f6a5a8daebae8f023bb8dffcb6db840a82bd1eee9889858629c64207fd30b520695358464903a299c4b1183ec332cc35db73cddd29a

    • SSDEEP

      6144:MYa69qoOJjNMKFSfJvFB6/8UtLkp8JOijJw8H:MYmMWSBvzGtIGOiVH

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks