Overview

overview

10

Static

static

7

c7b850bb36...fd.exe

windows7-x64

10

c7b850bb36...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7b850bb36fa73cd994b9bdba4f633fd

  • Size

    804KB

  • Sample

    240314-fcssasda58

  • MD5

    c7b850bb36fa73cd994b9bdba4f633fd

  • SHA1

    f842ed75c8b917557efd4fe832de922edb00aebf

  • SHA256

    c00ba50c2c594099200b3289ce34a91f3ac44e5d43407d0bcbb357bc156826ef

  • SHA512

    6c479a2ea6605fe2db34e4e9a956490617fb8fa6e776c7605d76d3fbacb35a486acdcc5d71009872fb546ff0e594bf2f808519f8e96bf358f1b84c8fc4240819

  • SSDEEP

    12288:pr30LtTNdhKUkpQ1amqY84Evl1GSIBeDoafoi1QCQH0GNeIRUr2F+vOdFgqQ:530B5dhKFS1a+eTgO4HNRF7gqQ

Score
10/10
persistenceupx

Malware Config

Targets

    • Target

      c7b850bb36fa73cd994b9bdba4f633fd

    • Size

      804KB

    • MD5

      c7b850bb36fa73cd994b9bdba4f633fd

    • SHA1

      f842ed75c8b917557efd4fe832de922edb00aebf

    • SHA256

      c00ba50c2c594099200b3289ce34a91f3ac44e5d43407d0bcbb357bc156826ef

    • SHA512

      6c479a2ea6605fe2db34e4e9a956490617fb8fa6e776c7605d76d3fbacb35a486acdcc5d71009872fb546ff0e594bf2f808519f8e96bf358f1b84c8fc4240819

    • SSDEEP

      12288:pr30LtTNdhKUkpQ1amqY84Evl1GSIBeDoafoi1QCQH0GNeIRUr2F+vOdFgqQ:530B5dhKFS1a+eTgO4HNRF7gqQ

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks