Overview

overview

10

Static

static

ssms.exe

windows7_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ssms.exe.zip

  • Size

    141KB

  • Sample

    210831-kg387jxf5a

  • MD5

    70623e015fca731bbc8a301e8013b162

  • SHA1

    7eceab10c9cd9c4f63177c57c413aa81a967bd4f

  • SHA256

    31b06358dd0fcb38be8db06d0bb27f763b4cf8ea0043b0428b768baa1a57af54

  • SHA512

    0e95ca38f9767e98904790fd82e345f28ed2b1c87d1fc5a6b24120e58c92e0241fd0806cdd7ca232f01d5d1d05c456b63e5f9b6ead5987886d5ab3758c321aef

Score
10/10
evasion

Malware Config

Targets

    • Target

      ssms.exe

    • Size

      155KB

    • MD5

      14a09a48ad23fe0ea5a180bee8cb750a

    • SHA1

      ac3cdd673f5126bc49faa72fb52284f513929db4

    • SHA256

      b14ccb3786af7553f7c251623499a7fe67974dde69d3dffd65733871cddf6b6d

    • SHA512

      3f11e6f0fb03f2857f29f4ba296dd4fdbda93938b1516a80c18d656d67175fec910727ca447c7217e8edf9a160d9c7c02ebd9f35081a0071247d572d960e9734

    Score
    10/10
    evasion

    • Modifies security service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks