Overview

overview

10

Static

static

84e4fdd127...a8.exe

windows7-x64

10

84e4fdd127...a8.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    84e4fdd1271e9ff39d47043d5c2087c3155691ab0e2f2a7ed5e6fffa1259f8a8

  • Size

    332KB

  • Sample

    221003-rhvdvsaegk

  • MD5

    6b90fd591efe7513cbbeb57f215681d1

  • SHA1

    ad5bc2c5b3142a5b6cd2de1bd9bcbe6f002f2e52

  • SHA256

    84e4fdd1271e9ff39d47043d5c2087c3155691ab0e2f2a7ed5e6fffa1259f8a8

  • SHA512

    d309dc0da34fb4c0460a68c8fbbfe3faca194a6401c2acfcc75e8e809c1bbd151b6792e48d21bd9b17f4c36003a622c31f03f17ef0ce6e5b16c2e1ee3f7d2c1a

  • SSDEEP

    6144:xaNJmnQo41QAOMwEIzUjQiZZvEYqWnKZ+pnVaO:x234BEIYjQWvrq1snkO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      84e4fdd1271e9ff39d47043d5c2087c3155691ab0e2f2a7ed5e6fffa1259f8a8

    • Size

      332KB

    • MD5

      6b90fd591efe7513cbbeb57f215681d1

    • SHA1

      ad5bc2c5b3142a5b6cd2de1bd9bcbe6f002f2e52

    • SHA256

      84e4fdd1271e9ff39d47043d5c2087c3155691ab0e2f2a7ed5e6fffa1259f8a8

    • SHA512

      d309dc0da34fb4c0460a68c8fbbfe3faca194a6401c2acfcc75e8e809c1bbd151b6792e48d21bd9b17f4c36003a622c31f03f17ef0ce6e5b16c2e1ee3f7d2c1a

    • SSDEEP

      6144:xaNJmnQo41QAOMwEIzUjQiZZvEYqWnKZ+pnVaO:x234BEIYjQWvrq1snkO

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks