Overview

overview

10

Static

static

eb58ce947a...91.exe

windows7-x64

10

eb58ce947a...91.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb58ce947aae52bbef77f7b0bcbee2ad4a7d3edce88fe37ec78b7ce60ef35a91

  • Size

    151KB

  • Sample

    221002-s5l7fadac6

  • MD5

    75d1cdc1856c633005c94bc8a5aa5cc1

  • SHA1

    42302355eeb35d88c0deed91d739e9f127dba032

  • SHA256

    eb58ce947aae52bbef77f7b0bcbee2ad4a7d3edce88fe37ec78b7ce60ef35a91

  • SHA512

    c530b479e191fd136fff4cb6fd972b0604ed16cc73857f2f3f9b4161a6c2ee586c3a326425a529cd6abb5dbca7a542dc1d217b616543e7e2d35b1ddcbfee387f

  • SSDEEP

    3072:idVTg1VnmbmM2y6XgtJBz1aVu5CJFsvRwNCZ8Dt6K9ylaCb:idVTymbmu6XgtJl1aVuknsvyCZst6K9E

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eb58ce947aae52bbef77f7b0bcbee2ad4a7d3edce88fe37ec78b7ce60ef35a91

    • Size

      151KB

    • MD5

      75d1cdc1856c633005c94bc8a5aa5cc1

    • SHA1

      42302355eeb35d88c0deed91d739e9f127dba032

    • SHA256

      eb58ce947aae52bbef77f7b0bcbee2ad4a7d3edce88fe37ec78b7ce60ef35a91

    • SHA512

      c530b479e191fd136fff4cb6fd972b0604ed16cc73857f2f3f9b4161a6c2ee586c3a326425a529cd6abb5dbca7a542dc1d217b616543e7e2d35b1ddcbfee387f

    • SSDEEP

      3072:idVTg1VnmbmM2y6XgtJBz1aVu5CJFsvRwNCZ8Dt6K9ylaCb:idVTymbmu6XgtJl1aVuknsvyCZst6K9E

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks