Overview

overview

8

Static

static

3549dfa98d...c4.exe

windows7_x64

8

3549dfa98d...c4.exe

windows10_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3549dfa98db11f34cf7d96466e0952c4.exe

  • Size

    212KB

  • Sample

    200630-5c5dlaek82

  • MD5

    3549dfa98db11f34cf7d96466e0952c4

  • SHA1

    582dd0688d26e512ffaebf94f4bebb315f2bb165

  • SHA256

    027e6f46a26cd7eec45555e7968d4d2ceda1d810a7005f8c015899b47d3173b9

  • SHA512

    925d29909a9534d77c908ad59824501b2fc61d1528d98bf184fbceeddee400c856da5f1902c11806a08544c388e513f96a5dbb505f2bc029666614e572212f4f

Score
8/10

Malware Config

Targets

    • Target

      3549dfa98db11f34cf7d96466e0952c4.exe

    • Size

      212KB

    • MD5

      3549dfa98db11f34cf7d96466e0952c4

    • SHA1

      582dd0688d26e512ffaebf94f4bebb315f2bb165

    • SHA256

      027e6f46a26cd7eec45555e7968d4d2ceda1d810a7005f8c015899b47d3173b9

    • SHA512

      925d29909a9534d77c908ad59824501b2fc61d1528d98bf184fbceeddee400c856da5f1902c11806a08544c388e513f96a5dbb505f2bc029666614e572212f4f

    Score
    8/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks