Overview

overview

7

Static

static

3

1d6fd2c21a...11.exe

windows7-x64

7

1d6fd2c21a...11.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1d6fd2c21a555c19b244809b66e16711

  • Size

    160KB

  • Sample

    231230-1lv91aeebj

  • MD5

    1d6fd2c21a555c19b244809b66e16711

  • SHA1

    1595476bfb22a1b899254201af7c8437be874746

  • SHA256

    fa4e871559819f4da3fc949b3722fd4d1ac5d51cfa66519cdb7f818bbd4568e5

  • SHA512

    aa67fadb97ac90b8e03f53d748a1b15ee84625bc1b9738dae3fbbc6547a87c54755741af2f0a73b7ae005ed97422ac3d077b74c1fb32b27ee880db8365579b94

  • SSDEEP

    3072:YTbuhFW5DEFXfi6oyg706SwG+7LYDnlpp+y7Nw5+BUjW5Qib:Y38WkKAgQ6SwG9DlCx+GjWi+

Score
7/10
persistence

Malware Config

Targets

    • Target

      1d6fd2c21a555c19b244809b66e16711

    • Size

      160KB

    • MD5

      1d6fd2c21a555c19b244809b66e16711

    • SHA1

      1595476bfb22a1b899254201af7c8437be874746

    • SHA256

      fa4e871559819f4da3fc949b3722fd4d1ac5d51cfa66519cdb7f818bbd4568e5

    • SHA512

      aa67fadb97ac90b8e03f53d748a1b15ee84625bc1b9738dae3fbbc6547a87c54755741af2f0a73b7ae005ed97422ac3d077b74c1fb32b27ee880db8365579b94

    • SSDEEP

      3072:YTbuhFW5DEFXfi6oyg706SwG+7LYDnlpp+y7Nw5+BUjW5Qib:Y38WkKAgQ6SwG9DlCx+GjWi+

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks