Overview

overview

7

Static

static

3

72e855025d...b5.exe

windows10-2004-x64

7

72e855025d...b5.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    72e855025d02c02fa90b0ee9296d8a59a6c008dff1b70682b58474a8183836b5.exe
  • Size 795KB
  • Sample260824-2f4vmazwf1
  • SHA256 72e855025d02c02fa90b0ee9296d8a59a6c008dff1b70682b58474a8183836b5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverypersistence

Malware Config

Targets

    • Target
      72e855025d02c02fa90b0ee9296d8a59a6c008dff1b70682b58474a8183836b5.exe
    • Size 795KB
    • SHA256 72e855025d02c02fa90b0ee9296d8a59a6c008dff1b70682b58474a8183836b5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoverypersistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks