Overview

overview

8

Static

static

3

8dcf719f4b...1f.exe

windows7-x64

7

8dcf719f4b...1f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8dcf719f4b50febd51ba748878c628357cc50aee0de9ce11b54585e1c165941f

  • Size

    4.2MB

  • Sample

    230923-wqk8daba64

  • MD5

    de717d82e34c52207d7fdc79e63b6a2f

  • SHA1

    c3d4902a06f6669fa77e7a69a781a09ba66ebb16

  • SHA256

    8dcf719f4b50febd51ba748878c628357cc50aee0de9ce11b54585e1c165941f

  • SHA512

    ce5d8bf866b24d5b4767d6f4d471117c20655ffb264fbef69f0d2322deebcbbd078aa3a218647400f7acefbb8549afaaf3294a8c24deda7ea5bcba2160486bb8

  • SSDEEP

    98304:gN8DXRTOsMt8IHNU9AfZIGpiSlpjCFau32MtyR1qVK:gMOsmU2ZIGpJlYFYMsRE

Score
8/10

Malware Config

Targets

    • Target

      8dcf719f4b50febd51ba748878c628357cc50aee0de9ce11b54585e1c165941f

    • Size

      4.2MB

    • MD5

      de717d82e34c52207d7fdc79e63b6a2f

    • SHA1

      c3d4902a06f6669fa77e7a69a781a09ba66ebb16

    • SHA256

      8dcf719f4b50febd51ba748878c628357cc50aee0de9ce11b54585e1c165941f

    • SHA512

      ce5d8bf866b24d5b4767d6f4d471117c20655ffb264fbef69f0d2322deebcbbd078aa3a218647400f7acefbb8549afaaf3294a8c24deda7ea5bcba2160486bb8

    • SSDEEP

      98304:gN8DXRTOsMt8IHNU9AfZIGpiSlpjCFau32MtyR1qVK:gMOsmU2ZIGpJlYFYMsRE

    Score
    8/10

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks