Overview

overview

7

Static

static

3

b41e3ca9b8...35.exe

windows7-x64

7

b41e3ca9b8...35.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b41e3ca9b8ff7f2a66333d06ad3ad535

  • Size

    47KB

  • Sample

    240305-h5tleahd9s

  • MD5

    b41e3ca9b8ff7f2a66333d06ad3ad535

  • SHA1

    7024b13209f696bad39c75971f18bde654065b4d

  • SHA256

    607ff350ae960c0b213e4df37b5a4ad5b236fedf18e2f45ef42382ba63f54bfe

  • SHA512

    1a88ad3753f5c17523f1225ee2821a0f70f08c690845bd51a9366530a0b8328118f069c4a9d140de485566e47be84423fff4e67a39185290fa29c7b3cb31b93f

  • SSDEEP

    768:MByHffoqbZLy0rrJo7MvfoF+e2g8g48w9qUeu/uAENVPOr1NPYcv51X7:MBaffoqbZmSo4le2g8gBUZGAENMLJ5F7

Score
7/10
persistence

Malware Config

Targets

    • Target

      b41e3ca9b8ff7f2a66333d06ad3ad535

    • Size

      47KB

    • MD5

      b41e3ca9b8ff7f2a66333d06ad3ad535

    • SHA1

      7024b13209f696bad39c75971f18bde654065b4d

    • SHA256

      607ff350ae960c0b213e4df37b5a4ad5b236fedf18e2f45ef42382ba63f54bfe

    • SHA512

      1a88ad3753f5c17523f1225ee2821a0f70f08c690845bd51a9366530a0b8328118f069c4a9d140de485566e47be84423fff4e67a39185290fa29c7b3cb31b93f

    • SSDEEP

      768:MByHffoqbZLy0rrJo7MvfoF+e2g8g48w9qUeu/uAENVPOr1NPYcv51X7:MBaffoqbZmSo4le2g8gBUZGAENMLJ5F7

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks