Overview

overview

10

Static

static

04daeae0fd...57.exe

windows7-x64

10

04daeae0fd...57.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04daeae0fdb2ffe7728d873e86143976dcd7c47a8f52aca2a1c7b5c7d9af8157

  • Size

    801KB

  • Sample

    221011-2sq5ashhfp

  • MD5

    43a5ed3dc544d9764efeb305ee52b650

  • SHA1

    b32bca0e207319b5a2c3e8815803fe4383a54d3e

  • SHA256

    04daeae0fdb2ffe7728d873e86143976dcd7c47a8f52aca2a1c7b5c7d9af8157

  • SHA512

    ee7cd1cc5209ab103e920d9f78dc49a67a048b5da9a1fec34bd441de85ae23e99f5aaeaf1ae78339d477b4dcd7130f350b6618293f4c042eff0371d29cda8ccf

  • SSDEEP

    24576:8Etl9mRda1Sls9vSGB2uJ2s4otqFCJrW9FqvSbqsHasgXhFHDAGtlRXZ+CP63n0J:PEs1XIc

Score
10/10
persistence

Malware Config

Targets

    • Target

      04daeae0fdb2ffe7728d873e86143976dcd7c47a8f52aca2a1c7b5c7d9af8157

    • Size

      801KB

    • MD5

      43a5ed3dc544d9764efeb305ee52b650

    • SHA1

      b32bca0e207319b5a2c3e8815803fe4383a54d3e

    • SHA256

      04daeae0fdb2ffe7728d873e86143976dcd7c47a8f52aca2a1c7b5c7d9af8157

    • SHA512

      ee7cd1cc5209ab103e920d9f78dc49a67a048b5da9a1fec34bd441de85ae23e99f5aaeaf1ae78339d477b4dcd7130f350b6618293f4c042eff0371d29cda8ccf

    • SSDEEP

      24576:8Etl9mRda1Sls9vSGB2uJ2s4otqFCJrW9FqvSbqsHasgXhFHDAGtlRXZ+CP63n0J:PEs1XIc

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks