Overview

overview

10

Static

static

3

96c7d1d5da...60.exe

windows7-x64

7

96c7d1d5da...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e4461418de7a12e7951ccf51fe4d4d3.bin

  • Size

    1.5MB

  • Sample

    241122-bld82sxlfp

  • MD5

    4e1f99894e14fb0285dd33b7e91c16d5

  • SHA1

    f40a12fb289527ad091fe6aad9662291e3f5dfc5

  • SHA256

    01bd1f1675b5de8dfcd468b5d0095cd389f4c9ca0a3d820ecdd1c619b34de61e

  • SHA512

    1b908c0d6735a55f91eccc9662688f78890f0de53ff710a5efea3ccebe279d93ba8e6fb4700aa43d6d38c68727de56aa5f66b3706dfcf4402b0014c51656a56f

  • SSDEEP

    24576:i2Pmk8aKdOlcmlqu9waddMdA7I6JwvdSs1gt+eF/EuI/RVIBXhMCNaRFDFTG:iE3FUOlku9pCd+XOvz1gt+iszblRFDFi

Score
10/10

Malware Config

Targets

    • Target

      96c7d1d5dab0c8060f3220816e3e49461ef328643d520545ffc8aa05ddd76760.exe

    • Size

      1.6MB

    • MD5

      3e4461418de7a12e7951ccf51fe4d4d3

    • SHA1

      d7332419080c1a8eaef111439feb71bda300a1d3

    • SHA256

      96c7d1d5dab0c8060f3220816e3e49461ef328643d520545ffc8aa05ddd76760

    • SHA512

      b01982718c3f62059f086c3274f9f8d1c98bbb9bcc187bfa466b369d08818cd2fe06e0949256eddbfd6f26b3fd5428ea8008d49adf6f233282f08c8dce4e9553

    • SSDEEP

      24576:9sRgQPPLVkiouiRjaMkVRu9JS70cJscGh6U8mEGKacNpVAADNi5GeZTOjo:9sV3LGjpkVIJunw98mTKfVAyNioSTO

    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops startup file

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks