Overview

overview

6

Static

static

3

b2dc06ba07...f8.exe

windows7-x64

6

b2dc06ba07...f8.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8.exe

  • Size

    131KB

  • Sample

    241121-hs86bszkez

  • MD5

    852645ff07c3dced2ba84b926e97fbac

  • SHA1

    844b1cfc26bf316ce45279210c43f2a0fcccb6ce

  • SHA256

    b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8

  • SHA512

    790e8b7f14e377974b7aa60b2577b193ed71c97ff281e7a0844d0ace0eb197662acfcd8657d889e091e6bcae421199b706f3c9aa5d0577899c7a11674e949534

  • SSDEEP

    1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImzU:BLxUyjp3xCTyDMsUWyw+Ubx7NB

Score
6/10
persistence

Malware Config

Targets

    • Target

      b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8.exe

    • Size

      131KB

    • MD5

      852645ff07c3dced2ba84b926e97fbac

    • SHA1

      844b1cfc26bf316ce45279210c43f2a0fcccb6ce

    • SHA256

      b2dc06ba077b7e07f9b5d20010f3bf4e49cc2ae94ba6c21bccb463bcefe459f8

    • SHA512

      790e8b7f14e377974b7aa60b2577b193ed71c97ff281e7a0844d0ace0eb197662acfcd8657d889e091e6bcae421199b706f3c9aa5d0577899c7a11674e949534

    • SSDEEP

      1536:BL+O/U7OBmKGS6CBK0t/ZCXPGuxgDM5YKBGNc/xf6KWcs8+SUkIcekqY1o/uImzU:BLxUyjp3xCTyDMsUWyw+Ubx7NB

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Uses Tor communications

      Malware can proxy its traffic through Tor for more anonymity.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks