Overview

overview

10

Static

static

3

Install.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Install.exe

  • Size

    164KB

  • Sample

    240221-cdkarshd6s

  • MD5

    8807cc9dcc79a647eba0186efcef1884

  • SHA1

    75ca831430e0332d02ffe1d9cf745bc0ab263242

  • SHA256

    844f3ef7d70345250d6186f19b5616836a982b1f9b1dc6fb031992a02038fab1

  • SHA512

    277374a6695f568ea05bf4e3bc8744f2c1766e735847a319371d76ff55f7ba780f8781ac84539188f5520a0c0c562749bec64177812e2555354bc7d39243e9c9

  • SSDEEP

    3072:pQpsm3j6NJnVBxnjXy1CCJY7xixfFGRh9kj+mBtzBIp7tl2ynHIoI3dxRjeG6:pQpsm3j6LVBxzGJCxBSfBtzapxl2H/RX

Score
10/10

Malware Config

Targets

    • Target

      Install.exe

    • Size

      164KB

    • MD5

      8807cc9dcc79a647eba0186efcef1884

    • SHA1

      75ca831430e0332d02ffe1d9cf745bc0ab263242

    • SHA256

      844f3ef7d70345250d6186f19b5616836a982b1f9b1dc6fb031992a02038fab1

    • SHA512

      277374a6695f568ea05bf4e3bc8744f2c1766e735847a319371d76ff55f7ba780f8781ac84539188f5520a0c0c562749bec64177812e2555354bc7d39243e9c9

    • SSDEEP

      3072:pQpsm3j6NJnVBxnjXy1CCJY7xixfFGRh9kj+mBtzBIp7tl2ynHIoI3dxRjeG6:pQpsm3j6LVBxzGJCxBSfBtzapxl2H/RX

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Matrix

Tasks