Overview

overview

7

Static

static

3

ee194a0b6f...4f.exe

windows7-x64

7

ee194a0b6f...4f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee194a0b6f6c6c28740a697a5466c44f.exe

  • Size

    4.0MB

  • Sample

    230808-h8ypjacg4w

  • MD5

    ee194a0b6f6c6c28740a697a5466c44f

  • SHA1

    6408895a89575bc618094c785ec3e5720ce455a0

  • SHA256

    d30e2337e87b5bad478d20dea2fa51d38a4a9506542bdaaea7640dcc68a4432c

  • SHA512

    b930974fa1af1f3fb4cbb31161501e135a612a705555dadc16374fe21d193952dc4837f7ab75fcca05c65daad18afe9a1ae724bd2a1862add27693db476ddaad

  • SSDEEP

    98304:ql0TOAthBZtr+BHIvMZPEmZpHvYXMheVNyDqiGdS3q1/3:WAtrbrwtZpHg8e6Cf3

Score
7/10
persistence

Malware Config

Targets

    • Target

      ee194a0b6f6c6c28740a697a5466c44f.exe

    • Size

      4.0MB

    • MD5

      ee194a0b6f6c6c28740a697a5466c44f

    • SHA1

      6408895a89575bc618094c785ec3e5720ce455a0

    • SHA256

      d30e2337e87b5bad478d20dea2fa51d38a4a9506542bdaaea7640dcc68a4432c

    • SHA512

      b930974fa1af1f3fb4cbb31161501e135a612a705555dadc16374fe21d193952dc4837f7ab75fcca05c65daad18afe9a1ae724bd2a1862add27693db476ddaad

    • SSDEEP

      98304:ql0TOAthBZtr+BHIvMZPEmZpHvYXMheVNyDqiGdS3q1/3:WAtrbrwtZpHg8e6Cf3

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks