Overview

overview

10

Static

static

0bfab51fd2...c3.exe

windows7-x64

10

0bfab51fd2...c3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0bfab51fd27af2d3af3933de2c51f033550587e978fcf9f6c46183d7d43b88c3

  • Size

    332KB

  • Sample

    221002-rll7nabggj

  • MD5

    6f85eb9b43f0b91f11b29f92e3289815

  • SHA1

    2ca6dbe1dc42b5aac4363d6361f7ef4c9f5e3bbd

  • SHA256

    0bfab51fd27af2d3af3933de2c51f033550587e978fcf9f6c46183d7d43b88c3

  • SHA512

    da43eba10614b459477e840c8d663b346d00f75fa0232a6fb41c831d2cf8c798392984eb968ab746b2251d9eb93f156edb03f7aae7a3e863dadb3b3a45b02a30

  • SSDEEP

    6144:xaNJmnQo41QAOMwEIzUjQiZZvEYqWnKZ+pnVai:x234BEIYjQWvrq1snki

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0bfab51fd27af2d3af3933de2c51f033550587e978fcf9f6c46183d7d43b88c3

    • Size

      332KB

    • MD5

      6f85eb9b43f0b91f11b29f92e3289815

    • SHA1

      2ca6dbe1dc42b5aac4363d6361f7ef4c9f5e3bbd

    • SHA256

      0bfab51fd27af2d3af3933de2c51f033550587e978fcf9f6c46183d7d43b88c3

    • SHA512

      da43eba10614b459477e840c8d663b346d00f75fa0232a6fb41c831d2cf8c798392984eb968ab746b2251d9eb93f156edb03f7aae7a3e863dadb3b3a45b02a30

    • SSDEEP

      6144:xaNJmnQo41QAOMwEIzUjQiZZvEYqWnKZ+pnVai:x234BEIYjQWvrq1snki

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks