Overview

overview

7

Static

static

1

winprofile

windows7-x64

7

winprofile

windows10-1703-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4019c7df205a1480e8fec6af3cde34af8be51e76edc0ddd682b8d6e9f8b1b62c

  • Size

    3.1MB

  • Sample

    240128-183mlachbk

  • MD5

    37f36bb1bc0ca31243048f2f15734a0c

  • SHA1

    39901c1cb11c9007b88431752bcc947e9528bb23

  • SHA256

    4019c7df205a1480e8fec6af3cde34af8be51e76edc0ddd682b8d6e9f8b1b62c

  • SHA512

    d595a1c95389276749f2abf18a89ac70c31628f2a4b5323ba5b6fa9234a9b506d4faa5f0ec00b59ce746643f32c5621a81253973969ded28dddaa8e0e63009c5

  • SSDEEP

    49152:GKsFkfXFcjOr5G941/fJV+DZF/JaGxUXkwaI3HBMW1+WzUcBV8PWIYvH:GvkfXFcjO8+g91UGx16xVYWx8OIY/

Score
7/10
persistence

Malware Config

Targets

    • Target

      4019c7df205a1480e8fec6af3cde34af8be51e76edc0ddd682b8d6e9f8b1b62c

    • Size

      3.1MB

    • MD5

      37f36bb1bc0ca31243048f2f15734a0c

    • SHA1

      39901c1cb11c9007b88431752bcc947e9528bb23

    • SHA256

      4019c7df205a1480e8fec6af3cde34af8be51e76edc0ddd682b8d6e9f8b1b62c

    • SHA512

      d595a1c95389276749f2abf18a89ac70c31628f2a4b5323ba5b6fa9234a9b506d4faa5f0ec00b59ce746643f32c5621a81253973969ded28dddaa8e0e63009c5

    • SSDEEP

      49152:GKsFkfXFcjOr5G941/fJV+DZF/JaGxUXkwaI3HBMW1+WzUcBV8PWIYvH:GvkfXFcjO8+g91UGx16xVYWx8OIY/

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks