Overview

overview

10

Static

static

3

a0bd3e3b9c...aa.exe

windows7-x64

10

a0bd3e3b9c...aa.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0bd3e3b9cf473adf3fedcdfb41782aa

  • Size

    185KB

  • Sample

    240224-c7gfzafg2x

  • MD5

    a0bd3e3b9cf473adf3fedcdfb41782aa

  • SHA1

    03a29032fe32a9eec1208a053065e1eab0cf6956

  • SHA256

    33fd1c532349d48de6f33628e6b2fb68613f20ae297f4c7f7a3d705c90c691a1

  • SHA512

    ce3a8c82db4102abf6833a4467f3f22b697eee13702e6cb35543161a2605b26b566b4be142b2560af2e5c7994c7be99a96520b5b176f49f3a4013c74dad20b87

  • SSDEEP

    3072:sYH3BbCXHTkGA35sqZH9Wu4R8EcmXn0bmlICrx73xMxRaSIR7gLih88k:sm3dCXYGA35s9RpLxl9obNIR7hh88k

Score
10/10
evasion

Malware Config

Targets

    • Target

      a0bd3e3b9cf473adf3fedcdfb41782aa

    • Size

      185KB

    • MD5

      a0bd3e3b9cf473adf3fedcdfb41782aa

    • SHA1

      03a29032fe32a9eec1208a053065e1eab0cf6956

    • SHA256

      33fd1c532349d48de6f33628e6b2fb68613f20ae297f4c7f7a3d705c90c691a1

    • SHA512

      ce3a8c82db4102abf6833a4467f3f22b697eee13702e6cb35543161a2605b26b566b4be142b2560af2e5c7994c7be99a96520b5b176f49f3a4013c74dad20b87

    • SSDEEP

      3072:sYH3BbCXHTkGA35sqZH9Wu4R8EcmXn0bmlICrx73xMxRaSIR7gLih88k:sm3dCXYGA35s9RpLxl9obNIR7hh88k

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Deletes itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks