Overview

overview

7

Static

static

3

data64_2.exe

windows7-x64

7

data64_2.exe

windows10-2004-x64

7

Resubmissions

21/08/2023, 04:02

230821-el9xhaaf94 7

21/08/2023, 03:19

230821-dt8hzaae74 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    data64_2.exe

  • Size

    1.5MB

  • Sample

    230821-dt8hzaae74

  • MD5

    48a0efb20b34146d249e1d2ec6e4b635

  • SHA1

    5b31708982e1b7a4809860bfca27c87d8cce7096

  • SHA256

    1e717f211f4300f2fe0524cd35550de1477e3ad93aaf7166a696cd385f6bb6c6

  • SHA512

    4ed35a70b97c93392c481a1d595ec040bc9eed8abd30324506b80dd756860be3af4d6aefe90ce6740e993c041aef16ec4599607e5d0142beb1508387324b958a

  • SSDEEP

    24576:N+foijJDPnvcpzN3F5shvWuAJoaaDOrIP6cjn2RVXYDXmadbDjf92J2MzvgdfR2j:NyoijJDPnvcpzN3F5shvWuAJoaaDOrI3

Score
7/10
persistence

Malware Config

Targets

    • Target

      data64_2.exe

    • Size

      1.5MB

    • MD5

      48a0efb20b34146d249e1d2ec6e4b635

    • SHA1

      5b31708982e1b7a4809860bfca27c87d8cce7096

    • SHA256

      1e717f211f4300f2fe0524cd35550de1477e3ad93aaf7166a696cd385f6bb6c6

    • SHA512

      4ed35a70b97c93392c481a1d595ec040bc9eed8abd30324506b80dd756860be3af4d6aefe90ce6740e993c041aef16ec4599607e5d0142beb1508387324b958a

    • SSDEEP

      24576:N+foijJDPnvcpzN3F5shvWuAJoaaDOrIP6cjn2RVXYDXmadbDjf92J2MzvgdfR2j:NyoijJDPnvcpzN3F5shvWuAJoaaDOrI3

    Score
    7/10
    persistence

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks