Overview

overview

10

Static

static

9040be76b0...98.exe

windows7-x64

6

9040be76b0...98.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9040be76b0dc88e33f37fa1922330a9b37be9914bd28aac5c1be786b40839298

  • Size

    96KB

  • Sample

    221002-d9f4naghar

  • MD5

    73f9370c242b85891b47bafbf7ffad70

  • SHA1

    bead083d3c20c99e89048a460f35ef59bcb013e6

  • SHA256

    9040be76b0dc88e33f37fa1922330a9b37be9914bd28aac5c1be786b40839298

  • SHA512

    30fa114a6cf6e9a8fecc901aa859a76d3ffc7b702de0a26fe26642d9a6b0c097ed2c5c69dc1c00b2878134eb49f430ec5e686f24debe4ecaca4866d71509ffaf

  • SSDEEP

    1536:gd1BLsh2ASVq8vMPhW/herBPdEPduCYzxhD1d:6zsh2AAvDZerBP8UH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9040be76b0dc88e33f37fa1922330a9b37be9914bd28aac5c1be786b40839298

    • Size

      96KB

    • MD5

      73f9370c242b85891b47bafbf7ffad70

    • SHA1

      bead083d3c20c99e89048a460f35ef59bcb013e6

    • SHA256

      9040be76b0dc88e33f37fa1922330a9b37be9914bd28aac5c1be786b40839298

    • SHA512

      30fa114a6cf6e9a8fecc901aa859a76d3ffc7b702de0a26fe26642d9a6b0c097ed2c5c69dc1c00b2878134eb49f430ec5e686f24debe4ecaca4866d71509ffaf

    • SSDEEP

      1536:gd1BLsh2ASVq8vMPhW/herBPdEPduCYzxhD1d:6zsh2AAvDZerBP8UH

    Score
    10/10
    persistenceevasion

    • Modifies firewall policy service

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks