Overview

overview

7

Static

static

3

3c3f0174f8...a3.exe

windows7-x64

7

3c3f0174f8...a3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c3f0174f895eec89347d930499c09a3

  • Size

    483KB

  • Sample

    240101-h9vdhagfe6

  • MD5

    3c3f0174f895eec89347d930499c09a3

  • SHA1

    e3fea545a96bbc26062f96a9ed8f59c6472556cd

  • SHA256

    ef900e3b5e226d958b89bbb2018fe5fcd2a5a06764c7eacd2e962b61796bda3c

  • SHA512

    fa9664c2b44902cbcc364220a2ede582fe6bb34a0247292c4d22b634ee353d7239b095c250838a6e15ee560aef2dd55220c4fead7fa21a77909d713e55a9faf6

  • SSDEEP

    12288:qjSk8nfoMu+YX71hgLVzmaeSGGRLVrQ3tN5BLl/wxLPXn/9gmXuXs:qjxMfoMu+ssBzPc+xrQ/5BOLvn/9gYu8

Score
7/10

Malware Config

Targets

    • Target

      3c3f0174f895eec89347d930499c09a3

    • Size

      483KB

    • MD5

      3c3f0174f895eec89347d930499c09a3

    • SHA1

      e3fea545a96bbc26062f96a9ed8f59c6472556cd

    • SHA256

      ef900e3b5e226d958b89bbb2018fe5fcd2a5a06764c7eacd2e962b61796bda3c

    • SHA512

      fa9664c2b44902cbcc364220a2ede582fe6bb34a0247292c4d22b634ee353d7239b095c250838a6e15ee560aef2dd55220c4fead7fa21a77909d713e55a9faf6

    • SSDEEP

      12288:qjSk8nfoMu+YX71hgLVzmaeSGGRLVrQ3tN5BLl/wxLPXn/9gmXuXs:qjxMfoMu+ssBzPc+xrQ/5BOLvn/9gYu8

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks