Overview

overview

10

Static

static

10

0a3f9a829e...fd.exe

windows7_x64

6

0a3f9a829e...fd.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a3f9a829efe3fc9845e1ccb2221556e6cf7ef0ed2872ed436f0ac48db8760fd

  • Size

    5.7MB

  • Sample

    220217-az9rfagbhl

  • MD5

    01715548d3884f1a12a8da4bb12be2f8

  • SHA1

    d8ba0b013d803c82dbe6a651ff6214c1b8d76f64

  • SHA256

    0a3f9a829efe3fc9845e1ccb2221556e6cf7ef0ed2872ed436f0ac48db8760fd

  • SHA512

    dfdd9af56f3ffeb3e55ee96b05b1bdc46c77ef70434a47d89b9fd71845d9c86a65623871b6a330c2179cc6564e7072c22f324e646de8e8d5efc471120fc8f051

Score
10/10
darkcometneshtapersistence

Malware Config

Targets

    • Target

      0a3f9a829efe3fc9845e1ccb2221556e6cf7ef0ed2872ed436f0ac48db8760fd

    • Size

      5.7MB

    • MD5

      01715548d3884f1a12a8da4bb12be2f8

    • SHA1

      d8ba0b013d803c82dbe6a651ff6214c1b8d76f64

    • SHA256

      0a3f9a829efe3fc9845e1ccb2221556e6cf7ef0ed2872ed436f0ac48db8760fd

    • SHA512

      dfdd9af56f3ffeb3e55ee96b05b1bdc46c77ef70434a47d89b9fd71845d9c86a65623871b6a330c2179cc6564e7072c22f324e646de8e8d5efc471120fc8f051

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks