Overview

overview

10

Static

static

e68a717b7a...f6.exe

windows7-x64

10

e68a717b7a...f6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e68a717b7a4de2ed98de576100b5ce3111f98c450e3ff452049da26102390df6

  • Size

    157KB

  • Sample

    221002-s5mszadac7

  • MD5

    793cbcd0d0d5c2c100ccb49f896f8eca

  • SHA1

    bfa6a42bb0d6280d9e69e907e9a9aa6ff3f6d1ff

  • SHA256

    e68a717b7a4de2ed98de576100b5ce3111f98c450e3ff452049da26102390df6

  • SHA512

    6795562dde3e13211653748a9d2af8256f955295e045489f332be48c18ef7de9337cc4883ff4baf4e4dab25ad1da33800310ddeb3a379ed2e1f07a24bd515062

  • SSDEEP

    3072:EgaO1vTegtP4Bc+z/0RO8YhBSJDLVAXhRRHh:EgaO1vDx4GgSnYnMHVAxRRHh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e68a717b7a4de2ed98de576100b5ce3111f98c450e3ff452049da26102390df6

    • Size

      157KB

    • MD5

      793cbcd0d0d5c2c100ccb49f896f8eca

    • SHA1

      bfa6a42bb0d6280d9e69e907e9a9aa6ff3f6d1ff

    • SHA256

      e68a717b7a4de2ed98de576100b5ce3111f98c450e3ff452049da26102390df6

    • SHA512

      6795562dde3e13211653748a9d2af8256f955295e045489f332be48c18ef7de9337cc4883ff4baf4e4dab25ad1da33800310ddeb3a379ed2e1f07a24bd515062

    • SSDEEP

      3072:EgaO1vTegtP4Bc+z/0RO8YhBSJDLVAXhRRHh:EgaO1vDx4GgSnYnMHVAxRRHh

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks