Overview

overview

7

Static

static

3

23c792a0e3...36.exe

windows7-x64

7

23c792a0e3...36.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e2632792d5411571ebc177628b7e92d.bin

  • Size

    349KB

  • Sample

    240530-cr3dhaca26

  • MD5

    4bc9dca76880cb80611e70b8681dea0d

  • SHA1

    29b9197ae7ec56f6703ab5611c15a16efcf12fda

  • SHA256

    bb3bd250a595e174e25c0deff41e3ba7c4ee21c47d41df4b4843429feeb39a32

  • SHA512

    424ffef737f772d3b596a2c7261cb1948d058f18cacb3e05730b5d6e8d2dc67daaa38c3b9b2019f6748d6f68e0df784b8a577b54f568f3fa44a4ca1447112f68

  • SSDEEP

    6144:xwI/FFv/UGoyUIyvgxNDxzAMlTZz6ObxAOJKg6kPQkF6kxR2HVSXZCQYziBIci/1:xZ7vtvHnuMll6OBn4kAkz21SpCQYuBIr

Score
7/10
persistence

Malware Config

Targets

    • Target

      23c792a0e3bfe323ccd3330636e9e6c9d9a3f891d4559cfc300199093da47236.exe

    • Size

      422KB

    • MD5

      7e2632792d5411571ebc177628b7e92d

    • SHA1

      a5d85a955602be6d71cc641448e541edc772bb81

    • SHA256

      23c792a0e3bfe323ccd3330636e9e6c9d9a3f891d4559cfc300199093da47236

    • SHA512

      5d77e41ef8360e02cb4577cdd29fbb8bcc370f880296f92f566b981cc6ec102bbd268f2289ad3ee8b56c59c1228ba278d64a657464cb148c549a4d7c9f7737ee

    • SSDEEP

      6144:wwrvOkgBWZb4JhiGu1WYw7ZN4N9rydQTFhQKWI/QX15oVnm89G:BOkgBWR4Hi51WYw7ZN4b4QjQKF4DImh

    Score
    7/10
    persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      fbe295e5a1acfbd0a6271898f885fe6a

    • SHA1

      d6d205922e61635472efb13c2bb92c9ac6cb96da

    • SHA256

      a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1

    • SHA512

      2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

    • SSDEEP

      192:yPtkiQJr7V9r3Ftr87NfwXQ6whlgi62V7i77blbTc4DI:N7Vxr8IgLgi3sVc4

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks