Overview

overview

7

Static

static

3

f8c6fd6248...10.exe

windows7-x64

7

f8c6fd6248...10.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8c6fd6248ac278245095fff5d70d110

  • Size

    641KB

  • Sample

    231228-z5kryabdb4

  • MD5

    f8c6fd6248ac278245095fff5d70d110

  • SHA1

    cfe9f1cfb04c8f5f48f152b816196d886e58847d

  • SHA256

    a9fa92d5104e741037565e093df48063a870d5dca4b3c2f6e137a6ca56bae516

  • SHA512

    70ee376cfd86a7c6d9a6a82d48d4ca0b6b6a78ccce7f843efab35db2a00d34626e12ceb019302050f339fc5c3849e3e1511556756142680b5620d105c00a9e08

  • SSDEEP

    12288:H6rt7hK7u5sb2YQtojteapKl2Zs6Cnh/4:ZSeH8lQgN4

Score
7/10
persistence

Malware Config

Targets

    • Target

      f8c6fd6248ac278245095fff5d70d110

    • Size

      641KB

    • MD5

      f8c6fd6248ac278245095fff5d70d110

    • SHA1

      cfe9f1cfb04c8f5f48f152b816196d886e58847d

    • SHA256

      a9fa92d5104e741037565e093df48063a870d5dca4b3c2f6e137a6ca56bae516

    • SHA512

      70ee376cfd86a7c6d9a6a82d48d4ca0b6b6a78ccce7f843efab35db2a00d34626e12ceb019302050f339fc5c3849e3e1511556756142680b5620d105c00a9e08

    • SSDEEP

      12288:H6rt7hK7u5sb2YQtojteapKl2Zs6Cnh/4:ZSeH8lQgN4

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks