Overview

overview

7

Static

static

1

4d6af0711d...32.exe

windows7-x64

7

4d6af0711d...32.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    4d6af0711d34d7889447d3325ca06832

  • Size

    241KB

  • Sample

    240109-ftg25agddj

  • MD5

    4d6af0711d34d7889447d3325ca06832

  • SHA1

    b20eca74c60cfaed12f3a7172d5622603f3894f9

  • SHA256

    13c851c7a714b32a2f796f1362fd5c087daef7d9e8d8ce642cf23e5417f36fd7

  • SHA512

    2925863c9f2b18303ffc6b49e83a82822a62ff3591ad070506957c046c2102f3c15ab551701428cddb61172f74943ae8048d8053bbecd8bc764124cd49645a24

  • SSDEEP

    3072:f8yF+AFf7nIh1eBdgKcAPm2D7zXKfLYT+niGFeY7bqzJ4/k7w27bTIQO5q:foyf7IreBdpcl2LwNwY7uuolb

Score
7/10
persistence

Malware Config

Targets

    • Target

      4d6af0711d34d7889447d3325ca06832

    • Size

      241KB

    • MD5

      4d6af0711d34d7889447d3325ca06832

    • SHA1

      b20eca74c60cfaed12f3a7172d5622603f3894f9

    • SHA256

      13c851c7a714b32a2f796f1362fd5c087daef7d9e8d8ce642cf23e5417f36fd7

    • SHA512

      2925863c9f2b18303ffc6b49e83a82822a62ff3591ad070506957c046c2102f3c15ab551701428cddb61172f74943ae8048d8053bbecd8bc764124cd49645a24

    • SSDEEP

      3072:f8yF+AFf7nIh1eBdgKcAPm2D7zXKfLYT+niGFeY7bqzJ4/k7w27bTIQO5q:foyf7IreBdpcl2LwNwY7uuolb

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks