Overview

overview

10

Static

static

3

5b57720bd5...6f.exe

windows7-x64

6

5b57720bd5...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b57720bd519f4d2b70fa197033cfc80a8176a5b397749be03d608c0369e6b6f

  • Size

    1.6MB

  • Sample

    240913-1xxl7ssbjd

  • MD5

    3b43abeb433c8a572f3febe073b8cb3f

  • SHA1

    61119d71bc73227c7bda686042bee9fdb372f992

  • SHA256

    5b57720bd519f4d2b70fa197033cfc80a8176a5b397749be03d608c0369e6b6f

  • SHA512

    9a3e667c65f37388a7f7aded73c579e8c263b10b26257f8419b409d0f5c6e7d3d2f751b3fce884063720706196a94a1aeaf5df91e36df1ecedc15b6c618a0ee7

  • SSDEEP

    49152:qDDj3lH58uiE7M27yByeSuwRFf4gw0xIDmW+oP21SEIDw:CDlFi2yYvf4gNxIq3TStM

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      5b57720bd519f4d2b70fa197033cfc80a8176a5b397749be03d608c0369e6b6f

    • Size

      1.6MB

    • MD5

      3b43abeb433c8a572f3febe073b8cb3f

    • SHA1

      61119d71bc73227c7bda686042bee9fdb372f992

    • SHA256

      5b57720bd519f4d2b70fa197033cfc80a8176a5b397749be03d608c0369e6b6f

    • SHA512

      9a3e667c65f37388a7f7aded73c579e8c263b10b26257f8419b409d0f5c6e7d3d2f751b3fce884063720706196a94a1aeaf5df91e36df1ecedc15b6c618a0ee7

    • SSDEEP

      49152:qDDj3lH58uiE7M27yByeSuwRFf4gw0xIDmW+oP21SEIDw:CDlFi2yYvf4gNxIq3TStM

    Score
    10/10
    discoverypersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks