Overview

overview

7

Static

static

3

89b2ab6645...bb.exe

windows7-x64

7

89b2ab6645...bb.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    89b2ab66458fb19873dcd29be71d21bb

  • Size

    34KB

  • Sample

    240202-rb1bjaaacj

  • MD5

    89b2ab66458fb19873dcd29be71d21bb

  • SHA1

    1010e211cf2634d8e72b398a515b26c3cc37d2fa

  • SHA256

    5b243c86b89230db12ef49bda66fd4417412be84eb7ef2fb9028b66ef9f1279a

  • SHA512

    e69ca4c126d742288cc5e3c5b779b62606ee511a0840228653bb4c8bd7430b1a371f34172304d604c2ef4984aef01f0cface6ff7d25ba3cfbdde13f8130a5533

  • SSDEEP

    768:7C/ZZIq55P8S1QZRPas6yjlbY8pxejmc1JsbR0y0DT4:7ChWqrnQZBzphY5j91ybsD0

Score
7/10

Malware Config

Targets

    • Target

      89b2ab66458fb19873dcd29be71d21bb

    • Size

      34KB

    • MD5

      89b2ab66458fb19873dcd29be71d21bb

    • SHA1

      1010e211cf2634d8e72b398a515b26c3cc37d2fa

    • SHA256

      5b243c86b89230db12ef49bda66fd4417412be84eb7ef2fb9028b66ef9f1279a

    • SHA512

      e69ca4c126d742288cc5e3c5b779b62606ee511a0840228653bb4c8bd7430b1a371f34172304d604c2ef4984aef01f0cface6ff7d25ba3cfbdde13f8130a5533

    • SSDEEP

      768:7C/ZZIq55P8S1QZRPas6yjlbY8pxejmc1JsbR0y0DT4:7ChWqrnQZBzphY5j91ybsD0

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks