Overview

overview

7

Static

static

1

647191120d...f2.exe

windows7-x64

7

647191120d...f2.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    647191120d0db00253e2b0dfc46524f2

  • Size

    292KB

  • Sample

    240118-evwfgacedn

  • MD5

    647191120d0db00253e2b0dfc46524f2

  • SHA1

    0166014df4ecb51a5c5565c7eb51dc596988b9f9

  • SHA256

    be6e57f5104787d0d6ab4a9bb4add523f51ec90178e1fb693526b0c740a4ccb6

  • SHA512

    4463d1a106e5881c84f5cc875cd57a880c71db0a69955e91a377e149a10e83c9858e28719aa7d825a8f32060612eafcaa833cc62416d686bf4a894ced95506e1

  • SSDEEP

    6144:wXuEFlvdqWLqOKc/B5RyaynzgvGq6JhW7OQgtm0DTPj:wXuEF/zLp/B5YzFHbtmg

Score
7/10
persistence

Malware Config

Targets

    • Target

      647191120d0db00253e2b0dfc46524f2

    • Size

      292KB

    • MD5

      647191120d0db00253e2b0dfc46524f2

    • SHA1

      0166014df4ecb51a5c5565c7eb51dc596988b9f9

    • SHA256

      be6e57f5104787d0d6ab4a9bb4add523f51ec90178e1fb693526b0c740a4ccb6

    • SHA512

      4463d1a106e5881c84f5cc875cd57a880c71db0a69955e91a377e149a10e83c9858e28719aa7d825a8f32060612eafcaa833cc62416d686bf4a894ced95506e1

    • SSDEEP

      6144:wXuEFlvdqWLqOKc/B5RyaynzgvGq6JhW7OQgtm0DTPj:wXuEF/zLp/B5YzFHbtmg

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks