Overview

overview

7

Static

static

1

8ffe79d7e8...ff.exe

windows7-x64

7

8ffe79d7e8...ff.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ffe79d7e86da8dd2fd5908053b2d1ff

  • Size

    79KB

  • Sample

    240204-yf4cbabdhl

  • MD5

    8ffe79d7e86da8dd2fd5908053b2d1ff

  • SHA1

    78131aa57241addb844a6d89940c66047c32eacb

  • SHA256

    c4785ef64991e8e55d395a4ccdab39e87e69243228398db99fd187f36a4f9f36

  • SHA512

    00f3b8394d521ca4f4876a5960ab428c5ccce1b809676186189a4f9c1b50ac910b8bd908483db444359361252f094023e0b76d1bc702b162200b54c6b36963d6

  • SSDEEP

    1536:+16bq+91nioxizwglsP5XZFzCDnhat2zWim4qaq9e4VjuM+qtZleL60eY0Z/N:Qx2Ri8g+P5Xi/wXhbILmY0Z/N

Score
7/10
persistence

Malware Config

Targets

    • Target

      8ffe79d7e86da8dd2fd5908053b2d1ff

    • Size

      79KB

    • MD5

      8ffe79d7e86da8dd2fd5908053b2d1ff

    • SHA1

      78131aa57241addb844a6d89940c66047c32eacb

    • SHA256

      c4785ef64991e8e55d395a4ccdab39e87e69243228398db99fd187f36a4f9f36

    • SHA512

      00f3b8394d521ca4f4876a5960ab428c5ccce1b809676186189a4f9c1b50ac910b8bd908483db444359361252f094023e0b76d1bc702b162200b54c6b36963d6

    • SSDEEP

      1536:+16bq+91nioxizwglsP5XZFzCDnhat2zWim4qaq9e4VjuM+qtZleL60eY0Z/N:Qx2Ri8g+P5Xi/wXhbILmY0Z/N

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks