Overview

overview

6

Static

static

1

winprofile

windows7-x64

5

winprofile

windows10-1703-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    4866b68a1d5cf08d245208ee19807b896866394474424d5a6fac66b04a7d353b

  • Size

    1.8MB

  • Sample

    230714-e1zebacb36

  • MD5

    187da610ca07d7cf7fb5e937c6169224

  • SHA1

    20195b603fa9f55e485dce45bfd0db19ac8f1369

  • SHA256

    4866b68a1d5cf08d245208ee19807b896866394474424d5a6fac66b04a7d353b

  • SHA512

    b7cdced4e7530889f7ede2517711569177f7ea1607d9d971435e3343d5ee69d923c2aa681db74a59dd9c73131900960c72fbc7c35e2263ad21a3ff9b28e71c97

  • SSDEEP

    24576:8EFIOUwwhTSf1qiS6y+ypfETzGHjILxZzTSURc0GmC3DV7Q+uOxBl:G1hHiS64ILxJOU60GRDVTuuBl

Score
6/10
persistence

Malware Config

Targets

    • Target

      4866b68a1d5cf08d245208ee19807b896866394474424d5a6fac66b04a7d353b

    • Size

      1.8MB

    • MD5

      187da610ca07d7cf7fb5e937c6169224

    • SHA1

      20195b603fa9f55e485dce45bfd0db19ac8f1369

    • SHA256

      4866b68a1d5cf08d245208ee19807b896866394474424d5a6fac66b04a7d353b

    • SHA512

      b7cdced4e7530889f7ede2517711569177f7ea1607d9d971435e3343d5ee69d923c2aa681db74a59dd9c73131900960c72fbc7c35e2263ad21a3ff9b28e71c97

    • SSDEEP

      24576:8EFIOUwwhTSf1qiS6y+ypfETzGHjILxZzTSURc0GmC3DV7Q+uOxBl:G1hHiS64ILxJOU60GRDVTuuBl

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks