Overview

overview

7

Static

static

3

0567ced467...82.exe

windows7-x64

7

0567ced467...82.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0567ced4675f6497334746b38f8a5982

  • Size

    37KB

  • Sample

    231229-17f27scdgq

  • MD5

    0567ced4675f6497334746b38f8a5982

  • SHA1

    c6501e869de98b50bf62a2afd2befa3962230515

  • SHA256

    ab31352c605edc6571ddbf58b864376e8378fb02f12b9dc2f70f770864385f24

  • SHA512

    6d3528b8afeb7ee02296751e2101586eb489b8ab99b23d5bf75575b8156c34ac344ae72ccccabd3e7e51cb4ea653d25a30095f5a9ea278ec92f2850917b3c0cb

  • SSDEEP

    768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrb:j0Rbb5WRQYt9ir/2wras

Score
7/10

Malware Config

Targets

    • Target

      0567ced4675f6497334746b38f8a5982

    • Size

      37KB

    • MD5

      0567ced4675f6497334746b38f8a5982

    • SHA1

      c6501e869de98b50bf62a2afd2befa3962230515

    • SHA256

      ab31352c605edc6571ddbf58b864376e8378fb02f12b9dc2f70f770864385f24

    • SHA512

      6d3528b8afeb7ee02296751e2101586eb489b8ab99b23d5bf75575b8156c34ac344ae72ccccabd3e7e51cb4ea653d25a30095f5a9ea278ec92f2850917b3c0cb

    • SSDEEP

      768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrb:j0Rbb5WRQYt9ir/2wras

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks