Overview

overview

8

Static

static

3

8aa71d608b...32.exe

windows7-x64

8

8aa71d608b...32.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8aa71d608b8758f3ce886562dafa4830_exe32.exe

  • Size

    112KB

  • Sample

    231015-ydyn2sch41

  • MD5

    8aa71d608b8758f3ce886562dafa4830

  • SHA1

    5110e0d7bdc9a794e49e9694cfcf31bdeccef67c

  • SHA256

    9ed9a580a347c9b272561413246e782cf7cd127a22c2b9684880cd0dad7d07b0

  • SHA512

    ae408ffba5227de672d9134886376b8975215b163ade26101c6681fbaf945639b789072c0fd3ba3698f1e07d098e1a685fcb1d1be1243bb376a3fe33f754826b

  • SSDEEP

    1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4Bh5:l6uB28owvlrVnihVVi4H5

Score
8/10
persistence

Malware Config

Targets

    • Target

      8aa71d608b8758f3ce886562dafa4830_exe32.exe

    • Size

      112KB

    • MD5

      8aa71d608b8758f3ce886562dafa4830

    • SHA1

      5110e0d7bdc9a794e49e9694cfcf31bdeccef67c

    • SHA256

      9ed9a580a347c9b272561413246e782cf7cd127a22c2b9684880cd0dad7d07b0

    • SHA512

      ae408ffba5227de672d9134886376b8975215b163ade26101c6681fbaf945639b789072c0fd3ba3698f1e07d098e1a685fcb1d1be1243bb376a3fe33f754826b

    • SSDEEP

      1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4Bh5:l6uB28owvlrVnihVVi4H5

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks