Overview

overview

7

Static

static

3

tmp.exe

windows7-x64

7

tmp.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    666KB

  • Sample

    230806-edv4dafg84

  • MD5

    4abf4307d3c34c700ba5f3bfcc9d8fbe

  • SHA1

    215cc86274dff3bf3da6dd1f6392cb42bb527c09

  • SHA256

    b2587af66ae9a2cc8daa61c4b752571509730679f8cd853344c6977dd63afaa0

  • SHA512

    5236ae0ed091dc5538d2fffa70a6d639c429cc13a39fde4a1ac12764859d6e4693821949d8b68636dc47f960a675760db30c1b4678b2274adb42a4c92002c381

  • SSDEEP

    12288:ygNz7hDhASCIORFW1Z1iVSpB3wv0/JNjk085BEylkKMx2LlpuqjePXpW6Wr:yg5tDhASC7Wlpuv03j38LESkKMxHqjeP

Score
7/10

Malware Config

Targets

    • Target

      tmp

    • Size

      666KB

    • MD5

      4abf4307d3c34c700ba5f3bfcc9d8fbe

    • SHA1

      215cc86274dff3bf3da6dd1f6392cb42bb527c09

    • SHA256

      b2587af66ae9a2cc8daa61c4b752571509730679f8cd853344c6977dd63afaa0

    • SHA512

      5236ae0ed091dc5538d2fffa70a6d639c429cc13a39fde4a1ac12764859d6e4693821949d8b68636dc47f960a675760db30c1b4678b2274adb42a4c92002c381

    • SSDEEP

      12288:ygNz7hDhASCIORFW1Z1iVSpB3wv0/JNjk085BEylkKMx2LlpuqjePXpW6Wr:yg5tDhASC7Wlpuv03j38LESkKMxHqjeP

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks