Overview

overview

6

Static

static

3

77ab6ac1d8...9c.exe

windows7-x64

6

77ab6ac1d8...9c.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    77ab6ac1d8a4378c8671724d54a56e9c

  • Size

    25KB

  • Sample

    240126-sern8shfer

  • MD5

    77ab6ac1d8a4378c8671724d54a56e9c

  • SHA1

    c576020d7b756a44fbc4b27c3c5917b966badc7a

  • SHA256

    1774d83d8dcf3eda6c7c42d1178af047f3730fecc0d4cd985e6bc961c8be8020

  • SHA512

    fb82f33cb8c5dbd5b53086eb65565795fe6ac7c52cf26d8b46ad340e5487cbea8862b68762fcebff9da04031f610944830069cb63b553c10a9589aad14bc5e7b

  • SSDEEP

    384:2f6nTiO+tOM7f/jD1RCR/cO9jsSENmVmX3tj/0NC5uYJGwV:U8TQfVRCR/zslNmMX3tjss5uWVV

Score
6/10
persistence

Malware Config

Targets

    • Target

      77ab6ac1d8a4378c8671724d54a56e9c

    • Size

      25KB

    • MD5

      77ab6ac1d8a4378c8671724d54a56e9c

    • SHA1

      c576020d7b756a44fbc4b27c3c5917b966badc7a

    • SHA256

      1774d83d8dcf3eda6c7c42d1178af047f3730fecc0d4cd985e6bc961c8be8020

    • SHA512

      fb82f33cb8c5dbd5b53086eb65565795fe6ac7c52cf26d8b46ad340e5487cbea8862b68762fcebff9da04031f610944830069cb63b553c10a9589aad14bc5e7b

    • SSDEEP

      384:2f6nTiO+tOM7f/jD1RCR/cO9jsSENmVmX3tj/0NC5uYJGwV:U8TQfVRCR/zslNmMX3tjss5uWVV

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks