Overview

overview

10

Static

static

1

Install.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Install.exe

  • Size

    351KB

  • Sample

    230302-t3hlxadg56

  • MD5

    e2462dff81e09c335dd89f711c7a2fba

  • SHA1

    5b9badc4d85f1ce4912772507523ab062a730d4e

  • SHA256

    fcd60b5bd3815f1c591ada33b9a46d4126c216dc32cc7b946352a938844138bd

  • SHA512

    bbedc7d5c74ecd851e422aa5c89768300b4522d08ef8f361c4eb84f6830d146bc0069c070f7fdf686f01eceed4786240a55770f8fcbcdf60902bc6c60cb4243e

  • SSDEEP

    6144:qG1wX8iQS7SP8FRguKgHMQj6WAcZ0te0nhhX/AgdvotX9VRZefVu4F2O971Nd:qgwtFK4Fj/MNhl/d8X9VRZetu40QpNd

Score
10/10

Malware Config

Targets

    • Target

      Install.exe

    • Size

      351KB

    • MD5

      e2462dff81e09c335dd89f711c7a2fba

    • SHA1

      5b9badc4d85f1ce4912772507523ab062a730d4e

    • SHA256

      fcd60b5bd3815f1c591ada33b9a46d4126c216dc32cc7b946352a938844138bd

    • SHA512

      bbedc7d5c74ecd851e422aa5c89768300b4522d08ef8f361c4eb84f6830d146bc0069c070f7fdf686f01eceed4786240a55770f8fcbcdf60902bc6c60cb4243e

    • SSDEEP

      6144:qG1wX8iQS7SP8FRguKgHMQj6WAcZ0te0nhhX/AgdvotX9VRZefVu4F2O971Nd:qgwtFK4Fj/MNhl/d8X9VRZetu40QpNd

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks