Overview

overview

7

Static

static

3

f86bf50fd5...2N.exe

windows7-x64

7

f86bf50fd5...2N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f86bf50fd5a62d67fc1e17f263ad2e241e2d297dd172c55cd177e583f2dead22N

  • Size

    209KB

  • Sample

    240919-gl9mvathjp

  • MD5

    e1e3fc0fbc68988ab64aeeec354e5330

  • SHA1

    389a1ff562b3315013ca273f68b28c4767fb7339

  • SHA256

    f86bf50fd5a62d67fc1e17f263ad2e241e2d297dd172c55cd177e583f2dead22

  • SHA512

    27276214548a47264663183037cf8f4887ccc87b85903c68b6b6c99687565997f4ba43edcf8d957876cd4cbfde1feb90f9bd48170b06f887d27c1ce13cf8fc2e

  • SSDEEP

    6144:Ev80+yHEsUsEVBB7kzZl9yJWW1RZHMWmHc6bG:Ev87sUscBN4l94GG

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      f86bf50fd5a62d67fc1e17f263ad2e241e2d297dd172c55cd177e583f2dead22N

    • Size

      209KB

    • MD5

      e1e3fc0fbc68988ab64aeeec354e5330

    • SHA1

      389a1ff562b3315013ca273f68b28c4767fb7339

    • SHA256

      f86bf50fd5a62d67fc1e17f263ad2e241e2d297dd172c55cd177e583f2dead22

    • SHA512

      27276214548a47264663183037cf8f4887ccc87b85903c68b6b6c99687565997f4ba43edcf8d957876cd4cbfde1feb90f9bd48170b06f887d27c1ce13cf8fc2e

    • SSDEEP

      6144:Ev80+yHEsUsEVBB7kzZl9yJWW1RZHMWmHc6bG:Ev87sUscBN4l94GG

    Score
    7/10
    defense_evasiondiscovery

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks