Overview

overview

7

Static

static

3

f2b345fceb...64.exe

windows7-x64

7

f2b345fceb...64.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f2b345fcebcd9ed2e342399cfe9819abee7c3642efb6279ad3b4c940555d4564.exe

  • Size

    1.7MB

  • Sample

    240221-ew76nabh63

  • MD5

    7770760fd67b4ec881c0fe317c9a400e

  • SHA1

    09468febd4a58cbc0936570317e9b7bf7d654143

  • SHA256

    f2b345fcebcd9ed2e342399cfe9819abee7c3642efb6279ad3b4c940555d4564

  • SHA512

    757f3810bc37c90dbab44a02b52a051a25800dcb335a392e8463cac51ae55000d14ff98e90b4fe00f894dacb4804eb57b2c8c522ef3d4c861ccc264732cddc9a

  • SSDEEP

    49152:txAr7f9JvhGTP+2Nv4JVClDq0LvoZo358R2h+:sP1RID+YviYCe588h+

Score
7/10
persistence

Malware Config

Targets

    • Target

      f2b345fcebcd9ed2e342399cfe9819abee7c3642efb6279ad3b4c940555d4564.exe

    • Size

      1.7MB

    • MD5

      7770760fd67b4ec881c0fe317c9a400e

    • SHA1

      09468febd4a58cbc0936570317e9b7bf7d654143

    • SHA256

      f2b345fcebcd9ed2e342399cfe9819abee7c3642efb6279ad3b4c940555d4564

    • SHA512

      757f3810bc37c90dbab44a02b52a051a25800dcb335a392e8463cac51ae55000d14ff98e90b4fe00f894dacb4804eb57b2c8c522ef3d4c861ccc264732cddc9a

    • SSDEEP

      49152:txAr7f9JvhGTP+2Nv4JVClDq0LvoZo358R2h+:sP1RID+YviYCe588h+

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      55a26d7800446f1373056064c64c3ce8

    • SHA1

      80256857e9a0a9c8897923b717f3435295a76002

    • SHA256

      904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

    • SHA512

      04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

    • SSDEEP

      192:MPtkumJX7zBE2kGwfy9S9VkPsFQ1Mx1c:97O2k5q9wA1Mxa

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks