Overview

overview

10

Static

static

3

193b60b98b...db.exe

windows7-x64

3

193b60b98b...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    193b60b98b114fb0be76052cb833c1fd4113da3e4d64ef74fdc130bcc23757db.exe

  • Size

    1.4MB

  • Sample

    241010-lyv3fayfnm

  • MD5

    f357156e8157dcf81f5dcc174e0570ba

  • SHA1

    5496b42b39ccdb7e2797bfe63909c429a216605d

  • SHA256

    193b60b98b114fb0be76052cb833c1fd4113da3e4d64ef74fdc130bcc23757db

  • SHA512

    b8fbc9ae6203d560d964aea33e43d19253df304074e1c0e31de93111ae6876362599fabf4437d423fd43093cf6c33c2fcc85e1153709f14dc7e9702f62ffb5f0

  • SSDEEP

    24576:wReOx+zoeroeAUe7vr6K5BrkSz8uS7QwO1:wReOfUAv2K5BrkG8uS7XO1

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      193b60b98b114fb0be76052cb833c1fd4113da3e4d64ef74fdc130bcc23757db.exe

    • Size

      1.4MB

    • MD5

      f357156e8157dcf81f5dcc174e0570ba

    • SHA1

      5496b42b39ccdb7e2797bfe63909c429a216605d

    • SHA256

      193b60b98b114fb0be76052cb833c1fd4113da3e4d64ef74fdc130bcc23757db

    • SHA512

      b8fbc9ae6203d560d964aea33e43d19253df304074e1c0e31de93111ae6876362599fabf4437d423fd43093cf6c33c2fcc85e1153709f14dc7e9702f62ffb5f0

    • SSDEEP

      24576:wReOx+zoeroeAUe7vr6K5BrkSz8uS7QwO1:wReOfUAv2K5BrkG8uS7XO1

    Score
    10/10
    discoverypersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks