Overview

overview

10

Static

static

2792604db4...69.exe

windows7-x64

10

2792604db4...69.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2792604db44a6d89fed48ac3c8d33e33100eaa09dee5ed3acae99f9941121469

  • Size

    70KB

  • Sample

    221003-d9mw7sefe8

  • MD5

    60dee069c496a8ae9171fb1b979bc5f0

  • SHA1

    f142eec78ee1b011aa4a0cf9706b1ec0ca8683a6

  • SHA256

    2792604db44a6d89fed48ac3c8d33e33100eaa09dee5ed3acae99f9941121469

  • SHA512

    e427574aa1e4d6be06a0e9e920eff47dc7cbeaecc04fcd3b5f738b4cbf069ba3e065171bbb6aa202c87bdaaa4f7fbca95ff99c27b3a087130994692b81ba2676

  • SSDEEP

    1536:AJiiNJ/EgCSAqtl/+RSBl9b74VHiv3rBCh:AJiOcg9AqtCSBf34gv3rBCh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2792604db44a6d89fed48ac3c8d33e33100eaa09dee5ed3acae99f9941121469

    • Size

      70KB

    • MD5

      60dee069c496a8ae9171fb1b979bc5f0

    • SHA1

      f142eec78ee1b011aa4a0cf9706b1ec0ca8683a6

    • SHA256

      2792604db44a6d89fed48ac3c8d33e33100eaa09dee5ed3acae99f9941121469

    • SHA512

      e427574aa1e4d6be06a0e9e920eff47dc7cbeaecc04fcd3b5f738b4cbf069ba3e065171bbb6aa202c87bdaaa4f7fbca95ff99c27b3a087130994692b81ba2676

    • SSDEEP

      1536:AJiiNJ/EgCSAqtl/+RSBl9b74VHiv3rBCh:AJiOcg9AqtCSBf34gv3rBCh

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks