Overview

overview

7

Static

static

3

14a7b5f22f...f7.exe

windows7-x64

7

14a7b5f22f...f7.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    14a7b5f22f4d49fe9e3d015a9c4201f7

  • Size

    320KB

  • Sample

    231230-lk3kcsceb5

  • MD5

    14a7b5f22f4d49fe9e3d015a9c4201f7

  • SHA1

    55be0ba571e8ad64235c3c22383f0168b8c50c34

  • SHA256

    42d3d043314f773bc91043d528eb4275eb12f6af5fa67515e34ccc98cbd79915

  • SHA512

    50184a2c58e719aec66bb4d762a7648bdaa35231bd077811a5cf0a91ddce943eb978466ca81c60a5010a1ebe20dac32e13f825f26297597b4f1205d7b6cba4a5

  • SSDEEP

    6144:PstOTpJUXDT7p9GdqDzjkS6N0lfwrm7mgu:UtK4pI4DzjkT0BKgu

Score
7/10
persistence

Malware Config

Targets

    • Target

      14a7b5f22f4d49fe9e3d015a9c4201f7

    • Size

      320KB

    • MD5

      14a7b5f22f4d49fe9e3d015a9c4201f7

    • SHA1

      55be0ba571e8ad64235c3c22383f0168b8c50c34

    • SHA256

      42d3d043314f773bc91043d528eb4275eb12f6af5fa67515e34ccc98cbd79915

    • SHA512

      50184a2c58e719aec66bb4d762a7648bdaa35231bd077811a5cf0a91ddce943eb978466ca81c60a5010a1ebe20dac32e13f825f26297597b4f1205d7b6cba4a5

    • SSDEEP

      6144:PstOTpJUXDT7p9GdqDzjkS6N0lfwrm7mgu:UtK4pI4DzjkT0BKgu

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks