Overview

overview

7

Static

static

3

IMG-SKFGPC...ns.exe

windows7-x64

7

IMG-SKFGPC...ns.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02408b212bb7e89fec59dee6cd08b55bbbac3bb592e8de73175c9688ef3bacfd.gz

  • Size

    751KB

  • Sample

    240228-twfhzaga98

  • MD5

    ed9ebd533f522c38d693a45d87163801

  • SHA1

    ca1948a91f9735d95400331801815fa3366f28af

  • SHA256

    02408b212bb7e89fec59dee6cd08b55bbbac3bb592e8de73175c9688ef3bacfd

  • SHA512

    f002a09a0f7d3a639ac9082b3cf9557fe2059b69160b59c81e00e065fd4d8568035129c31abf9ad73e185b3029499b6f25deb2cbf71e837d35942b9f36c17ce7

  • SSDEEP

    12288:07sP8RfgY1hJ0TK2t0PX+bUnZw0qipQxmFAAcqaTRnkqaT01tuLyAYqz/bqD2TcO:Gs0Rfr1f60Jni0qhmFAAO5k9TgtlAYqd

Score
7/10
persistence

Malware Config

Targets

    • Target

      IMG-SKFGPC ORDER-2344240 Rekursivitetens.exe

    • Size

      777KB

    • MD5

      3746ddd84331a2869cde387d46a4f7cc

    • SHA1

      9d83a060b20e24fa0c6175db16f32be1f2da4024

    • SHA256

      601bc4c4ff50e846a29e702f894f72b8cea1c7c200b363795ed7905784dde043

    • SHA512

      fdabc8eedb243b00e479583b1021f0281ed48129e7d908d238577bb8e9775403f85e0c0afa97e6202ad6d004222715833e5788b4ee0592c3a385e4669aa338fd

    • SSDEEP

      24576:Ae8hwsezFUtA1te9tTjk5mLgERRdYnzlzmZeE:JsezqtP0AcQozlQJ

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      55a26d7800446f1373056064c64c3ce8

    • SHA1

      80256857e9a0a9c8897923b717f3435295a76002

    • SHA256

      904fd5481d72f4e03b01a455f848dedd095d0fb17e33608e0d849f5196fb6ff8

    • SHA512

      04b8ab7a85c26f188c0a06f524488d6f2ac2884bf107c860c82e94ae12c3859f825133d78338fd2b594dfc48f7dc9888ae76fee786c6252a5c77c88755128a5b

    • SSDEEP

      192:MPtkumJX7zBE2kGwfy9S9VkPsFQ1Mx1c:97O2k5q9wA1Mxa

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks