Overview

overview

10

Static

static

3

4d78d9d134...fe.exe

windows7-x64

10

4d78d9d134...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4d78d9d1346c93a854746960b900846c5179eca2cbf4d1164b037bfd25c029fe.exe

  • Size

    6.7MB

  • Sample

    240202-x9hr2afhej

  • MD5

    08f410fed26aab5cddaf64bb5b36a627

  • SHA1

    81db0c9dba35495d8a5f0154d5f148e77bf56a0c

  • SHA256

    4d78d9d1346c93a854746960b900846c5179eca2cbf4d1164b037bfd25c029fe

  • SHA512

    2af2916e8ad64207c8f0a17d6920fdd1eb13de75f5319e6cce0f70fb8af61b09e20203c5de62f1ec02c2cc9034d1fed38893e8aed9ba75bbf56760c40edb1d96

  • SSDEEP

    98304:SAtoTztm7UsGggm+TRnxSgd8VlkLNWu8KRoTrP6nTUkspvo9KI:V6tm7UnMIxSQEX3PQhdEI

Score
10/10

Malware Config

Targets

    • Target

      4d78d9d1346c93a854746960b900846c5179eca2cbf4d1164b037bfd25c029fe.exe

    • Size

      6.7MB

    • MD5

      08f410fed26aab5cddaf64bb5b36a627

    • SHA1

      81db0c9dba35495d8a5f0154d5f148e77bf56a0c

    • SHA256

      4d78d9d1346c93a854746960b900846c5179eca2cbf4d1164b037bfd25c029fe

    • SHA512

      2af2916e8ad64207c8f0a17d6920fdd1eb13de75f5319e6cce0f70fb8af61b09e20203c5de62f1ec02c2cc9034d1fed38893e8aed9ba75bbf56760c40edb1d96

    • SSDEEP

      98304:SAtoTztm7UsGggm+TRnxSgd8VlkLNWu8KRoTrP6nTUkspvo9KI:V6tm7UnMIxSQEX3PQhdEI

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks