Overview

overview

10

Static

static

1fa5750fc9...e9.exe

windows7-x64

8

1fa5750fc9...e9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1fa5750fc948d93aa44b0a06e1762cfb52b90b0f2eb8bd0e82957ff708c468e9

  • Size

    65KB

  • Sample

    221003-wgp5zahgaq

  • MD5

    07bbfd3a66694dd33877d583c64e81a0

  • SHA1

    23a01fbf53b514ce7caaa115e2e3e0180b345112

  • SHA256

    1fa5750fc948d93aa44b0a06e1762cfb52b90b0f2eb8bd0e82957ff708c468e9

  • SHA512

    713acf9e9659afd8dc461f87a8d70aa5a77bfdd2d59731986db98c1f1b26cd52431dd16cf5d125f866822af7d0170dd66fefbfe07e56f57c3af4e72087acaf6e

  • SSDEEP

    1536:+JdMmJyDl+taZpoWyHjmg3Dvhh6M19zLl:+JuIyDHZRyHj93DCM19zL

Score
10/10
evasion

Malware Config

Targets

    • Target

      1fa5750fc948d93aa44b0a06e1762cfb52b90b0f2eb8bd0e82957ff708c468e9

    • Size

      65KB

    • MD5

      07bbfd3a66694dd33877d583c64e81a0

    • SHA1

      23a01fbf53b514ce7caaa115e2e3e0180b345112

    • SHA256

      1fa5750fc948d93aa44b0a06e1762cfb52b90b0f2eb8bd0e82957ff708c468e9

    • SHA512

      713acf9e9659afd8dc461f87a8d70aa5a77bfdd2d59731986db98c1f1b26cd52431dd16cf5d125f866822af7d0170dd66fefbfe07e56f57c3af4e72087acaf6e

    • SSDEEP

      1536:+JdMmJyDl+taZpoWyHjmg3Dvhh6M19zLl:+JuIyDHZRyHj93DCM19zL

    Score
    10/10
    evasion

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks