Overview

overview

7

Static

static

3

0e678fe738...d0.exe

windows7-x64

7

0e678fe738...d0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e678fe738d91ffc00cec08a44f9c2d0

  • Size

    297KB

  • Sample

    231225-h7fsbscfe6

  • MD5

    0e678fe738d91ffc00cec08a44f9c2d0

  • SHA1

    830b12977fa223e032e0199bc808519affc37cbd

  • SHA256

    23b8282a7d161cf200fa3acd1fe1d4dda762397c033d078e1d5e856ca7294265

  • SHA512

    2d3fb37ad2da855a62cbb8cc5f25b861ce1f193d6757f6b4b5c0d68a7d3f67bcdc6138970e41b58c2cfa7f0e192695270abd19b385cb9030393ce4abe9e09e5c

  • SSDEEP

    6144:IPzIT72Y0S7zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOfPECYeixlYGicxZG:I7k7SSyYsY1UMqMZJYSN7wbstOf8fve1

Score
7/10
persistence

Malware Config

Targets

    • Target

      0e678fe738d91ffc00cec08a44f9c2d0

    • Size

      297KB

    • MD5

      0e678fe738d91ffc00cec08a44f9c2d0

    • SHA1

      830b12977fa223e032e0199bc808519affc37cbd

    • SHA256

      23b8282a7d161cf200fa3acd1fe1d4dda762397c033d078e1d5e856ca7294265

    • SHA512

      2d3fb37ad2da855a62cbb8cc5f25b861ce1f193d6757f6b4b5c0d68a7d3f67bcdc6138970e41b58c2cfa7f0e192695270abd19b385cb9030393ce4abe9e09e5c

    • SSDEEP

      6144:IPzIT72Y0S7zinYKTY1SQshfRPVQe1MZkIYSccr7wbstOfPECYeixlYGicxZG:I7k7SSyYsY1UMqMZJYSN7wbstOf8fve1

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks