Overview

overview

10

Static

static

33704a16a7...48.exe

windows7-x64

10

33704a16a7...48.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33704a16a7c11012e32c350b470bf41ca7de3ec8447270f3875ef977de759b48

  • Size

    127KB

  • Sample

    221014-m9dg7scfa8

  • MD5

    77b9c1919000ca40b043a9549f5a6690

  • SHA1

    4fa78f3ce6b863c055f83a44436bf25c7f32b69e

  • SHA256

    33704a16a7c11012e32c350b470bf41ca7de3ec8447270f3875ef977de759b48

  • SHA512

    4b4005e831dbea80d341dbe91ff3f5a206b597d613ff52c6175b4961e49f76bbf4f98d6a3771b08e413b1419e1ea6cc510af3c387b7733af7bb4ebd1c8642334

  • SSDEEP

    1536:VsgToKHSmdkIDNxfdPy35wtAFElcab1npIS52eyphSajnS/:SgTfHp9DNxf8816g1pI0TyphL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      33704a16a7c11012e32c350b470bf41ca7de3ec8447270f3875ef977de759b48

    • Size

      127KB

    • MD5

      77b9c1919000ca40b043a9549f5a6690

    • SHA1

      4fa78f3ce6b863c055f83a44436bf25c7f32b69e

    • SHA256

      33704a16a7c11012e32c350b470bf41ca7de3ec8447270f3875ef977de759b48

    • SHA512

      4b4005e831dbea80d341dbe91ff3f5a206b597d613ff52c6175b4961e49f76bbf4f98d6a3771b08e413b1419e1ea6cc510af3c387b7733af7bb4ebd1c8642334

    • SSDEEP

      1536:VsgToKHSmdkIDNxfdPy35wtAFElcab1npIS52eyphSajnS/:SgTfHp9DNxf8816g1pI0TyphL

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies firewall policy service

      evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks