Overview

overview

10

Static

static

5

c14c1fe47f...67.exe

windows7-x64

10

c14c1fe47f...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c14c1fe47f2b2aa3b70e0800c600a0acfdd565e21a5828c78b1b807337155567

  • Size

    1.2MB

  • Sample

    221011-wbwqkagccm

  • MD5

    633acb5228578b422bea4597bb76c3c1

  • SHA1

    d1b3d147125d131952edcdf04a4848593748048a

  • SHA256

    c14c1fe47f2b2aa3b70e0800c600a0acfdd565e21a5828c78b1b807337155567

  • SHA512

    b8a0eb505a7d21161eacba15755996252d063d6b187781075939d9bd77365a4ca872b37e2621964f0ee427d1bf9b2cc49f9ccf5cec9709057e5100bd46d548fc

  • SSDEEP

    24576:cJeJfAqkjp98zHpieTXCeGOxmI8/+po9TFEu5OHeI:eeJfAJGpLrCeGOxmsQTFEu5OH/

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c14c1fe47f2b2aa3b70e0800c600a0acfdd565e21a5828c78b1b807337155567

    • Size

      1.2MB

    • MD5

      633acb5228578b422bea4597bb76c3c1

    • SHA1

      d1b3d147125d131952edcdf04a4848593748048a

    • SHA256

      c14c1fe47f2b2aa3b70e0800c600a0acfdd565e21a5828c78b1b807337155567

    • SHA512

      b8a0eb505a7d21161eacba15755996252d063d6b187781075939d9bd77365a4ca872b37e2621964f0ee427d1bf9b2cc49f9ccf5cec9709057e5100bd46d548fc

    • SSDEEP

      24576:cJeJfAqkjp98zHpieTXCeGOxmI8/+po9TFEu5OHeI:eeJfAJGpLrCeGOxmsQTFEu5OH/

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies WinLogon

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks