Overview

overview

8

Static

static

b3c971bce8...40.exe

windows7_x64

8

b3c971bce8...40.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3c971bce842a6f20ec56123c7d47740.exe

  • Size

    1.2MB

  • Sample

    200729-ym41z47haa

  • MD5

    b3c971bce842a6f20ec56123c7d47740

  • SHA1

    c8d22296c07888840c6723a665040f5586226c99

  • SHA256

    1338ec3c61a55f530cb2318bcf4bab95b5057212e65269a5768dd1de72cedf11

  • SHA512

    a0e30dc718905e9db4dd137b8fb1758aa9ed6657b615f4b3ddfbe0394ea27bbdda03c1757f64d60c0a77245ce97de01e61742c9059c2202aa5b2a9a6c3ae12db

Score
8/10
persistence

Malware Config

Targets

    • Target

      b3c971bce842a6f20ec56123c7d47740.exe

    • Size

      1.2MB

    • MD5

      b3c971bce842a6f20ec56123c7d47740

    • SHA1

      c8d22296c07888840c6723a665040f5586226c99

    • SHA256

      1338ec3c61a55f530cb2318bcf4bab95b5057212e65269a5768dd1de72cedf11

    • SHA512

      a0e30dc718905e9db4dd137b8fb1758aa9ed6657b615f4b3ddfbe0394ea27bbdda03c1757f64d60c0a77245ce97de01e61742c9059c2202aa5b2a9a6c3ae12db

    Score
    8/10
    persistence

    • Blacklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks