Overview

overview

10

Static

static

3

e239bd3cf8...71.exe

windows7-x64

6

e239bd3cf8...71.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e239bd3cf8877c45bd80a229eccf1c8f261b022c6bd0ee0f159e843425626471.exe

  • Size

    1.8MB

  • Sample

    240820-ch4vzascqm

  • MD5

    fcb01f79b2f9477f54efd5d8a1879e8b

  • SHA1

    f1c4a5ef49c4b25719a71a3323a363b6acd2cfb9

  • SHA256

    e239bd3cf8877c45bd80a229eccf1c8f261b022c6bd0ee0f159e843425626471

  • SHA512

    4226c787d9f606f3ed8a87af430643259da5a3f4b6558ae7dbe287cfd100eab58c4c4a52f6fe3e5af426662466d74c60a890554ff97b7dc62b4588b62bce76d5

  • SSDEEP

    49152:wcS/Y6i84Rqb/A2NUr/IL69o3Z4geTJS:ai8DAg8HKige

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      e239bd3cf8877c45bd80a229eccf1c8f261b022c6bd0ee0f159e843425626471.exe

    • Size

      1.8MB

    • MD5

      fcb01f79b2f9477f54efd5d8a1879e8b

    • SHA1

      f1c4a5ef49c4b25719a71a3323a363b6acd2cfb9

    • SHA256

      e239bd3cf8877c45bd80a229eccf1c8f261b022c6bd0ee0f159e843425626471

    • SHA512

      4226c787d9f606f3ed8a87af430643259da5a3f4b6558ae7dbe287cfd100eab58c4c4a52f6fe3e5af426662466d74c60a890554ff97b7dc62b4588b62bce76d5

    • SSDEEP

      49152:wcS/Y6i84Rqb/A2NUr/IL69o3Z4geTJS:ai8DAg8HKige

    Score
    10/10
    discoverypersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks