Overview

overview

7

Static

static

3

clp6.exe

windows7-x64

5

clp6.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    clp6.exe

  • Size

    5.2MB

  • Sample

    230615-yjqwdsah2z

  • MD5

    3790dfbffb0ce76d9a747ad3c90f61ba

  • SHA1

    ca543c85308d12a32c9a01b885847c55b69c0f22

  • SHA256

    9ba54fb78b4c9f03e11b6fb8e49ad54000281a255d7ddc48b4cea179aea335c1

  • SHA512

    ab963b7d19249ebd00b5fed0e4f8fdb18411f8d011953c77df31082dd035ad33a6ad1417db92d1db10e4f9fe5f592cb8395a4d8b746eb944eda3737553feba9a

  • SSDEEP

    98304:T+JEMZKrb2IMkmCeCmG4ynnL7JslIopk/fXoeVJrWdnSC0Ecr7KoNl8ct5/xYDyI:iNCb2IMkmqmGnLN8IopgfoeVJrWdnvcU

Score
7/10
persistence

Malware Config

Targets

    • Target

      clp6.exe

    • Size

      5.2MB

    • MD5

      3790dfbffb0ce76d9a747ad3c90f61ba

    • SHA1

      ca543c85308d12a32c9a01b885847c55b69c0f22

    • SHA256

      9ba54fb78b4c9f03e11b6fb8e49ad54000281a255d7ddc48b4cea179aea335c1

    • SHA512

      ab963b7d19249ebd00b5fed0e4f8fdb18411f8d011953c77df31082dd035ad33a6ad1417db92d1db10e4f9fe5f592cb8395a4d8b746eb944eda3737553feba9a

    • SSDEEP

      98304:T+JEMZKrb2IMkmCeCmG4ynnL7JslIopk/fXoeVJrWdnSC0Ecr7KoNl8ct5/xYDyI:iNCb2IMkmqmGnLN8IopgfoeVJrWdnvcU

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks