Overview

overview

8

Static

static

1

winprofile

windows7-x64

8

winprofile

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f9f8d6e19536d323a9bd32dd11c50f6998649dd5e3f00f946d03fed81783637

  • Size

    2.4MB

  • Sample

    230411-h9ye6abb59

  • MD5

    a62505758e85f40fa06345da8af15d21

  • SHA1

    21f1f6c7e18985baeb9082c3ccb7f30bdd32867a

  • SHA256

    3f9f8d6e19536d323a9bd32dd11c50f6998649dd5e3f00f946d03fed81783637

  • SHA512

    8c712db84b35f977caa4f87efad7b54f6340c6efa46c4a9a222947cb917f32a122bc9f34c3f85f91927b511f1c372471a2db25b9668289733ac1f7dace747014

  • SSDEEP

    24576:FkfiQkUbTO8OwvQZGrpl9Y1fHUDNsk8scl9VgXRP1O8l7Y5q6Q3k4U+A4lZVQ8C7:qfiXGr1fdCTeP/Kq6P4V7WyvOkEm92w

Score
8/10
persistence

Malware Config

Targets

    • Target

      3f9f8d6e19536d323a9bd32dd11c50f6998649dd5e3f00f946d03fed81783637

    • Size

      2.4MB

    • MD5

      a62505758e85f40fa06345da8af15d21

    • SHA1

      21f1f6c7e18985baeb9082c3ccb7f30bdd32867a

    • SHA256

      3f9f8d6e19536d323a9bd32dd11c50f6998649dd5e3f00f946d03fed81783637

    • SHA512

      8c712db84b35f977caa4f87efad7b54f6340c6efa46c4a9a222947cb917f32a122bc9f34c3f85f91927b511f1c372471a2db25b9668289733ac1f7dace747014

    • SSDEEP

      24576:FkfiQkUbTO8OwvQZGrpl9Y1fHUDNsk8scl9VgXRP1O8l7Y5q6Q3k4U+A4lZVQ8C7:qfiXGr1fdCTeP/Kq6P4V7WyvOkEm92w

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks