Overview

overview

10

Static

static

5

eddf53dedd...25.exe

windows7-x64

10

eddf53dedd...25.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eddf53dedda21e541b1ca202194bc9a7a515044e10a46063f589ca8e40287125

  • Size

    577KB

  • Sample

    221003-d93mnaefg2

  • MD5

    534fa406e246d764822c16114c823b70

  • SHA1

    4eafc3d0bc89d62b7cf05685f70c39ac4cf0cc7f

  • SHA256

    eddf53dedda21e541b1ca202194bc9a7a515044e10a46063f589ca8e40287125

  • SHA512

    6c4dec10b0b126e907e1d7946ea0ec0d2aab4f1e2d59b45512e8c0ee61429f1bca77f5c6490c8b156538aed24d901991eed484efe5b54aa894664e9c2216be9a

  • SSDEEP

    12288:26SKqT31T6WpJY6V765jKqostkm3Nbn1lcO/+zbt8v3VdPlcOq:DxqT31T6WE6I5jKqosOm9bn1N/nVFNq

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eddf53dedda21e541b1ca202194bc9a7a515044e10a46063f589ca8e40287125

    • Size

      577KB

    • MD5

      534fa406e246d764822c16114c823b70

    • SHA1

      4eafc3d0bc89d62b7cf05685f70c39ac4cf0cc7f

    • SHA256

      eddf53dedda21e541b1ca202194bc9a7a515044e10a46063f589ca8e40287125

    • SHA512

      6c4dec10b0b126e907e1d7946ea0ec0d2aab4f1e2d59b45512e8c0ee61429f1bca77f5c6490c8b156538aed24d901991eed484efe5b54aa894664e9c2216be9a

    • SSDEEP

      12288:26SKqT31T6WpJY6V765jKqostkm3Nbn1lcO/+zbt8v3VdPlcOq:DxqT31T6WE6I5jKqosOm9bn1N/nVFNq

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks