Overview

overview

7

Static

static

7

1d192f7c99...95.exe

windows7-x64

7

1d192f7c99...95.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d192f7c99e0e783d9e85d1c4f4a1195

  • Size

    1.4MB

  • Sample

    231225-avjz8abeam

  • MD5

    1d192f7c99e0e783d9e85d1c4f4a1195

  • SHA1

    b31f740c61e23a06898c09c338cd575205333ac4

  • SHA256

    18a8bcfe2f4ac00066bde3d35e5b582108656118722cda85a5b24e1cd83244f9

  • SHA512

    1322cdc60becb62d1d576c46a5a8f84e13c6cf9e03d70d5a3b350b4f06dfcade01b1f40f9133f1882030b67cfacb1c6fd0c3ea7770b826562eeab9abba245809

  • SSDEEP

    24576:1Po5tS3wzP9Au7b3c5EhYBScCBCZSWpDdU3jv0QEEXkzZbiVH9He2G/0ONiQyVJQ:yS3KP9AIb3cehYB8BRh8XEUzZEI0/+/F

Score
7/10
persistencethemida

Malware Config

Targets

    • Target

      1d192f7c99e0e783d9e85d1c4f4a1195

    • Size

      1.4MB

    • MD5

      1d192f7c99e0e783d9e85d1c4f4a1195

    • SHA1

      b31f740c61e23a06898c09c338cd575205333ac4

    • SHA256

      18a8bcfe2f4ac00066bde3d35e5b582108656118722cda85a5b24e1cd83244f9

    • SHA512

      1322cdc60becb62d1d576c46a5a8f84e13c6cf9e03d70d5a3b350b4f06dfcade01b1f40f9133f1882030b67cfacb1c6fd0c3ea7770b826562eeab9abba245809

    • SSDEEP

      24576:1Po5tS3wzP9Au7b3c5EhYBScCBCZSWpDdU3jv0QEEXkzZbiVH9He2G/0ONiQyVJQ:yS3KP9AIb3cehYB8BRh8XEUzZEI0/+/F

    Score
    7/10
    persistencethemida

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks