Overview

overview

10

Static

static

047a3d26e3...de.exe

windows7-x64

10

047a3d26e3...de.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    047a3d26e3e257b6e5c00956533e90d25ca57b5027ab445d0f4c970802852dde

  • Size

    134KB

  • Sample

    221003-s419zadbh9

  • MD5

    65b110ed95e0ef1014fbbee112c851cd

  • SHA1

    752d693f5a4aabbd50c5b6f461ad35cf725d27ba

  • SHA256

    047a3d26e3e257b6e5c00956533e90d25ca57b5027ab445d0f4c970802852dde

  • SHA512

    2a8f5fe58063912e02a87fe5157dfe04bead86b088106032304bf540fc82a6915b0973d1ddf5efd2407a45c62c9457bb7ed72235d066812d17b2978da9bf7415

  • SSDEEP

    3072:kUGTaiwM7tFOiWgU9oiZthCg+A713/NPvZWAu6+NByzJ:kp+51vNPhWAu6+NIzJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      047a3d26e3e257b6e5c00956533e90d25ca57b5027ab445d0f4c970802852dde

    • Size

      134KB

    • MD5

      65b110ed95e0ef1014fbbee112c851cd

    • SHA1

      752d693f5a4aabbd50c5b6f461ad35cf725d27ba

    • SHA256

      047a3d26e3e257b6e5c00956533e90d25ca57b5027ab445d0f4c970802852dde

    • SHA512

      2a8f5fe58063912e02a87fe5157dfe04bead86b088106032304bf540fc82a6915b0973d1ddf5efd2407a45c62c9457bb7ed72235d066812d17b2978da9bf7415

    • SSDEEP

      3072:kUGTaiwM7tFOiWgU9oiZthCg+A713/NPvZWAu6+NByzJ:kp+51vNPhWAu6+NIzJ

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks