Overview

overview

7

Static

static

3

39f864b3e3...05.exe

windows7-x64

7

39f864b3e3...05.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    39f864b3e3134f2aaa344b8c4b66bc05

  • Size

    506KB

  • Sample

    231231-rw9eyafbbr

  • MD5

    39f864b3e3134f2aaa344b8c4b66bc05

  • SHA1

    fa06b2aae6a900b5226f241ef7035d046e37f9a4

  • SHA256

    511caefc8753ca8901fe6b458b5e13b5926efe71e5d9c5d87ccf327e53fd68c9

  • SHA512

    899bfa870162be468acc04bdb0ab87a76caf5c59eedad49ff27704d5dc0df17d998dcf843b4d5eaec11b33e5f8a47be205e8d9acc62114e0138ef49b803c21cc

  • SSDEEP

    12288:cX7Mb4tAE/+rx0GrztV1lw9uYU70ArnEV/Pmau:k77tAE/+rxFj1l2XmA/C

Score
7/10

Malware Config

Targets

    • Target

      39f864b3e3134f2aaa344b8c4b66bc05

    • Size

      506KB

    • MD5

      39f864b3e3134f2aaa344b8c4b66bc05

    • SHA1

      fa06b2aae6a900b5226f241ef7035d046e37f9a4

    • SHA256

      511caefc8753ca8901fe6b458b5e13b5926efe71e5d9c5d87ccf327e53fd68c9

    • SHA512

      899bfa870162be468acc04bdb0ab87a76caf5c59eedad49ff27704d5dc0df17d998dcf843b4d5eaec11b33e5f8a47be205e8d9acc62114e0138ef49b803c21cc

    • SSDEEP

      12288:cX7Mb4tAE/+rx0GrztV1lw9uYU70ArnEV/Pmau:k77tAE/+rxFj1l2XmA/C

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks