Overview

overview

7

Static

static

1

7580de5edb...29.exe

windows7-x64

7

7580de5edb...29.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7580de5edbe07ae539d7021b092d2b29

  • Size

    262KB

  • Sample

    240125-zrtspagbel

  • MD5

    7580de5edbe07ae539d7021b092d2b29

  • SHA1

    d3839b47e35cc6c14872b164d71d137ef9211f70

  • SHA256

    589102099622ea5e39289aee3819242650a5b5f418eb6827c4c60201a09161e2

  • SHA512

    1b1555631e3f9510d0d1fdf2cabeee33b5408ee738358c3f2bceafd4c02b201d8ac00f21004eab8d56cc39ed4c9be7984e68df66187810dca6382fee8011f15e

  • SSDEEP

    6144:HU8Gp+df0afmVTRMdOdpn94sLrNXel9jb98+MAkC:08YkfXf4TRMS94svNuzjb9ZD

Score
7/10
persistence

Malware Config

Targets

    • Target

      7580de5edbe07ae539d7021b092d2b29

    • Size

      262KB

    • MD5

      7580de5edbe07ae539d7021b092d2b29

    • SHA1

      d3839b47e35cc6c14872b164d71d137ef9211f70

    • SHA256

      589102099622ea5e39289aee3819242650a5b5f418eb6827c4c60201a09161e2

    • SHA512

      1b1555631e3f9510d0d1fdf2cabeee33b5408ee738358c3f2bceafd4c02b201d8ac00f21004eab8d56cc39ed4c9be7984e68df66187810dca6382fee8011f15e

    • SSDEEP

      6144:HU8Gp+df0afmVTRMdOdpn94sLrNXel9jb98+MAkC:08YkfXf4TRMS94svNuzjb9ZD

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks