Overview

overview

10

Static

static

57ebbf7aaa...2c.exe

windows7-x64

10

57ebbf7aaa...2c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    57ebbf7aaa65f773ef25eb5e077eec648bf345ead4a24d2bdf75cfb6156b112c

  • Size

    131KB

  • Sample

    221012-v1bk9adden

  • MD5

    634e7ff4e0e8d569c4f69b9eda2aa9dc

  • SHA1

    735570b2bd49952ef6dc0f4ef341e5cc88b8ae70

  • SHA256

    57ebbf7aaa65f773ef25eb5e077eec648bf345ead4a24d2bdf75cfb6156b112c

  • SHA512

    3963b7f98d1f3c14c50cc2f291be9b071140842f9544c7c1c917c52d34de9164eb8668fd9833fe5dadd096c8075f0c21c5817ef2f3ed828d8ce70afd7d86ea72

  • SSDEEP

    3072:lsHITsbIBv54RjwQbkNCVp9XR2e+RYuU5L82uwi:eoTsbSQcC7V4e+RYrS2b

Score
10/10
persistence

Malware Config

Targets

    • Target

      57ebbf7aaa65f773ef25eb5e077eec648bf345ead4a24d2bdf75cfb6156b112c

    • Size

      131KB

    • MD5

      634e7ff4e0e8d569c4f69b9eda2aa9dc

    • SHA1

      735570b2bd49952ef6dc0f4ef341e5cc88b8ae70

    • SHA256

      57ebbf7aaa65f773ef25eb5e077eec648bf345ead4a24d2bdf75cfb6156b112c

    • SHA512

      3963b7f98d1f3c14c50cc2f291be9b071140842f9544c7c1c917c52d34de9164eb8668fd9833fe5dadd096c8075f0c21c5817ef2f3ed828d8ce70afd7d86ea72

    • SSDEEP

      3072:lsHITsbIBv54RjwQbkNCVp9XR2e+RYuU5L82uwi:eoTsbSQcC7V4e+RYrS2b

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks