Overview

overview

7

Static

static

1

0e014feeff...33.exe

windows7-x64

7

0e014feeff...33.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e014feeff34617756d6dd8f64236233

  • Size

    295KB

  • Sample

    231230-er487schf7

  • MD5

    0e014feeff34617756d6dd8f64236233

  • SHA1

    903216aff78dce053daa2b24ba27ade6286c8dc7

  • SHA256

    e786323393275c55c16a996cec369739f194224f5552f654405d5f2aede4b3d3

  • SHA512

    7b8a0aca56c7352e7bbf04ffe74b0b5fef58c19de1416582088334d4db4799d2384b9b9efc042e636fe6c1b1f68519d919b9015a8b7f0a6fcbd085928bfcbab7

  • SSDEEP

    6144:siGtsLBAlqNC+J+1PTG/qm/PgCnmUSFMhl4++M/oI29jK/:zGtsLut+k1PTEn/iUSFM8++rI2+/

Score
7/10
persistence

Malware Config

Targets

    • Target

      0e014feeff34617756d6dd8f64236233

    • Size

      295KB

    • MD5

      0e014feeff34617756d6dd8f64236233

    • SHA1

      903216aff78dce053daa2b24ba27ade6286c8dc7

    • SHA256

      e786323393275c55c16a996cec369739f194224f5552f654405d5f2aede4b3d3

    • SHA512

      7b8a0aca56c7352e7bbf04ffe74b0b5fef58c19de1416582088334d4db4799d2384b9b9efc042e636fe6c1b1f68519d919b9015a8b7f0a6fcbd085928bfcbab7

    • SSDEEP

      6144:siGtsLBAlqNC+J+1PTG/qm/PgCnmUSFMhl4++M/oI29jK/:zGtsLut+k1PTEn/iUSFM8++rI2+/

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks