Overview

overview

7

Static

static

3

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cW1zt5nY.exe

  • Size

    640KB

  • Sample

    231010-bc1exshe8v

  • MD5

    051e59fba85fde81cadfc4f1d38e57c9

  • SHA1

    195e2fd8be333f9ce2975c94597559717dd62594

  • SHA256

    725a783f5f272539f2899ff53fe5d44dc6ed17abef1bcdcdedaed513b3d1465a

  • SHA512

    6db8f4926635ffca26b2155c99d35172bb2da053f515b80a2cf5a3e3af22c7333b1f374b7987055196cd4a3fe2967b1b88fb72fb653e21aadd4ba63f023f0b34

  • SSDEEP

    12288:eMrVy90Z23Ox+QJJDJOM7HPWtNH8NVDAhG+g57y3/m:rytexp7vWtiLAhYKO

Score
7/10
persistence

Malware Config

Targets

    • Target

      cW1zt5nY.exe

    • Size

      640KB

    • MD5

      051e59fba85fde81cadfc4f1d38e57c9

    • SHA1

      195e2fd8be333f9ce2975c94597559717dd62594

    • SHA256

      725a783f5f272539f2899ff53fe5d44dc6ed17abef1bcdcdedaed513b3d1465a

    • SHA512

      6db8f4926635ffca26b2155c99d35172bb2da053f515b80a2cf5a3e3af22c7333b1f374b7987055196cd4a3fe2967b1b88fb72fb653e21aadd4ba63f023f0b34

    • SSDEEP

      12288:eMrVy90Z23Ox+QJJDJOM7HPWtNH8NVDAhG+g57y3/m:rytexp7vWtiLAhYKO

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks