Overview

overview

7

Static

static

1

983b7c98aa...4a.exe

windows7-x64

7

983b7c98aa...4a.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    983b7c98aae7dd6b3e370c5c3d8d404a

  • Size

    262KB

  • Sample

    240213-cr1vnshh6v

  • MD5

    983b7c98aae7dd6b3e370c5c3d8d404a

  • SHA1

    bfd6d26c2c573d3ba9859f391cb430678fed167a

  • SHA256

    9435adb201110308b389ba5cb2f935de96a0190cc347dc28cbf7a41da45fe387

  • SHA512

    429987cb8851d4d62f851a22275a56ae3d84a5e829835767fe71ca6c11a45cfb7aa132c312a4d3b3ca8ff5c2d20dea9d9fb472e2b3a43183ac1e2ae9b8c98cd7

  • SSDEEP

    6144:2jJ8Gp+df0afmVTRMdQdpn94sLrNXel9Fb98+MAv6:uJ8YkfXf4TRMA94svNuzFb9ZU

Score
7/10
persistence

Malware Config

Targets

    • Target

      983b7c98aae7dd6b3e370c5c3d8d404a

    • Size

      262KB

    • MD5

      983b7c98aae7dd6b3e370c5c3d8d404a

    • SHA1

      bfd6d26c2c573d3ba9859f391cb430678fed167a

    • SHA256

      9435adb201110308b389ba5cb2f935de96a0190cc347dc28cbf7a41da45fe387

    • SHA512

      429987cb8851d4d62f851a22275a56ae3d84a5e829835767fe71ca6c11a45cfb7aa132c312a4d3b3ca8ff5c2d20dea9d9fb472e2b3a43183ac1e2ae9b8c98cd7

    • SSDEEP

      6144:2jJ8Gp+df0afmVTRMdQdpn94sLrNXel9Fb98+MAv6:uJ8YkfXf4TRMA94svNuzFb9ZU

    Score
    7/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks