Overview

overview

7

Static

static

3

4.7.1.exe

windows7-x64

7

4.7.1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4.7.1.exe

  • Size

    15.7MB

  • Sample

    241002-rvwsfs1dqj

  • MD5

    df4788bcd739b0fa82c4c2bc24c5ba64

  • SHA1

    06c003c70672f2188b2d03c48836d478f0b99060

  • SHA256

    903406c3fdd68feb99ef2411cff76c3eeb2abb45200168aa12acc22e89f61040

  • SHA512

    ec87029db7900758cf1ad549f3d51525ae062374e12ddcfdf0305228f108eb96e221b1b860d78fc9679e953317606333ca70a7f58081e22bacd1a5baf6a9de68

  • SSDEEP

    393216:Qqszf490RQETSTqMvJJaHW8p24e9/5AfxrXF:/szfm0RQEWTqMhCW8p2RexF

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      4.7.1.exe

    • Size

      15.7MB

    • MD5

      df4788bcd739b0fa82c4c2bc24c5ba64

    • SHA1

      06c003c70672f2188b2d03c48836d478f0b99060

    • SHA256

      903406c3fdd68feb99ef2411cff76c3eeb2abb45200168aa12acc22e89f61040

    • SHA512

      ec87029db7900758cf1ad549f3d51525ae062374e12ddcfdf0305228f108eb96e221b1b860d78fc9679e953317606333ca70a7f58081e22bacd1a5baf6a9de68

    • SSDEEP

      393216:Qqszf490RQETSTqMvJJaHW8p24e9/5AfxrXF:/szfm0RQEWTqMhCW8p2RexF

    Score
    7/10

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks