Overview

overview

7

Static

static

3

004c577988...3e.exe

windows7-x64

7

004c577988...3e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    004c577988aa60a83cf44bc796dea53e

  • Size

    34KB

  • Sample

    231225-c3gwyacgg2

  • MD5

    004c577988aa60a83cf44bc796dea53e

  • SHA1

    c66d80416dbe145f138cd54a9e2d167bd44e06ca

  • SHA256

    d47317356bb7d44069e7c38cbb8deb3e1bc472ec90fe270b0ef85f1a6bde67b5

  • SHA512

    da23a3ca1d01e278b168353114339e3d46fca8d6ae5a28d566450b04f4fc8ec3f5c68d3a53f385417475f3275107a0fc264f4e5da57a1bbe49818a81481183bb

  • SSDEEP

    768:TdaYVyu0KnshGZxpv/ncZfgp/6PVo1I/C1setyWvyenC2leD1U:5aeyfheJnG496Pzq1VQWmDU

Score
7/10

Malware Config

Targets

    • Target

      004c577988aa60a83cf44bc796dea53e

    • Size

      34KB

    • MD5

      004c577988aa60a83cf44bc796dea53e

    • SHA1

      c66d80416dbe145f138cd54a9e2d167bd44e06ca

    • SHA256

      d47317356bb7d44069e7c38cbb8deb3e1bc472ec90fe270b0ef85f1a6bde67b5

    • SHA512

      da23a3ca1d01e278b168353114339e3d46fca8d6ae5a28d566450b04f4fc8ec3f5c68d3a53f385417475f3275107a0fc264f4e5da57a1bbe49818a81481183bb

    • SSDEEP

      768:TdaYVyu0KnshGZxpv/ncZfgp/6PVo1I/C1setyWvyenC2leD1U:5aeyfheJnG496Pzq1VQWmDU

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks