Overview

overview

10

Static

static

1

251658deca...in.exe

windows7-x64

1

251658deca...in.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    251658deca6970f2412e182eca1aff5b.bin.exe
  • Size 6.4MB
  • Sample230330-rvpzxaee3x
  • SHA256 f2cbacd915456e47e8801353dce4cfdbfe2aeeaf6d5a8adaeaa325d0c30d00fc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
evasion

Malware Config

Targets

    • Target
      251658deca6970f2412e182eca1aff5b.bin.exe
    • Size 6.4MB
    • SHA256 f2cbacd915456e47e8801353dce4cfdbfe2aeeaf6d5a8adaeaa325d0c30d00fc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    evasion

    • Modifies security service

      evasion

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Drops file in Drivers directory

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks