Overview

overview

8

Static

static

N-388-30.0...cx.lnk

windows7_x64

8

N-388-30.0...cx.lnk

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcc97ed145e4272f766bc9dce5e0ce2ef0d759691e9bea73e1ad029763c963c9

  • Size

    48KB

  • Sample

    200716-3zsyq6gsye

  • MD5

    bbc65d2de9a81f4565e42b5f49bef10b

  • SHA1

    8aad2f4e1dbe7a9cad7323d4535100d238b609e4

  • SHA256

    fcc97ed145e4272f766bc9dce5e0ce2ef0d759691e9bea73e1ad029763c963c9

  • SHA512

    da9c0a8ed3d835732b150588fdfab4830b1c010feb63bf57373f5a6cea70e3f3befc49369c3aef1024be49d8a9a2b3cb375e35458002fec101f777de60df4c59

Score
8/10
persistence

Malware Config

Targets

    • Target

      N-388-30.06.2020.docx.lnk

    • Size

      60KB

    • MD5

      7b5f028144aa35afdf9f4835fa5432b8

    • SHA1

      8bf59baf6a003c279e95540bfb92149f6f0ba668

    • SHA256

      35bc847e8a2ac7ccb75850cf69db5a47c245ed2a4dc5e98283dfd8f7f9df59e1

    • SHA512

      2dd8bf9ab657252f86de10126f4533a3fd0053f8adb6abb2e62d30aebd9fb257d036442f3383bde2ff9fac410f2613a4caccb57fd0ff04dc8c22d164a4ed9ead

    Score
    8/10
    persistence

    • Blacklisted process makes network request

    • Deletes itself

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks