Overview

overview

7

Static

static

3

5bb0e9f657...c3.exe

windows7-x64

7

5bb0e9f657...c3.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bb0e9f6577c16dab42c7ce6d95b05c3

  • Size

    168KB

  • Sample

    240115-a5wf1afbb4

  • MD5

    5bb0e9f6577c16dab42c7ce6d95b05c3

  • SHA1

    0930579226cd7af209c57da8cf28ca4f14d14207

  • SHA256

    2f232d00f18e4a2ff2b32580a1322a036b26262c55cff9efa725b9f3ffd2b408

  • SHA512

    49fd152c445d71a63be557070a6afcd7f97c685e3984b96255678306f76cdaef18c339225866a71a7f83ecf7a60c2a4a749105137660b8824991ec1fff3adc70

  • SSDEEP

    3072:ZKv38WGhZoNp5yEXKien9HuE/HtkvuK0a0KuNT9fIzxMUa:ZKv38WuKrnoK0dT5U

Score
7/10
persistence

Malware Config

Targets

    • Target

      5bb0e9f6577c16dab42c7ce6d95b05c3

    • Size

      168KB

    • MD5

      5bb0e9f6577c16dab42c7ce6d95b05c3

    • SHA1

      0930579226cd7af209c57da8cf28ca4f14d14207

    • SHA256

      2f232d00f18e4a2ff2b32580a1322a036b26262c55cff9efa725b9f3ffd2b408

    • SHA512

      49fd152c445d71a63be557070a6afcd7f97c685e3984b96255678306f76cdaef18c339225866a71a7f83ecf7a60c2a4a749105137660b8824991ec1fff3adc70

    • SSDEEP

      3072:ZKv38WGhZoNp5yEXKien9HuE/HtkvuK0a0KuNT9fIzxMUa:ZKv38WuKrnoK0dT5U

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks