Overview

overview

10

Static

static

1742a2b31f...88.exe

windows7-x64

10

1742a2b31f...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1742a2b31f27c7461e9736b1ae9c2982000510ebc7323cc22b2e4093c7fdfe88

  • Size

    260KB

  • Sample

    221018-fgc8eaeger

  • MD5

    139cddd2f9c63e0549ea7c7d88f016db

  • SHA1

    47e34652648004d350da903a48a44aff01682608

  • SHA256

    1742a2b31f27c7461e9736b1ae9c2982000510ebc7323cc22b2e4093c7fdfe88

  • SHA512

    225086a40e3e738edef9b04d25d51bbae3b80640bb63b146a8aa7000265f5381905cff8edd8be0e84cffc236a9be1afd9251d39ca8b69ed813090d24dfd4e072

  • SSDEEP

    3072:PWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1S:PWkWXV9wUezUroW+tCmCCfNGh

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1742a2b31f27c7461e9736b1ae9c2982000510ebc7323cc22b2e4093c7fdfe88

    • Size

      260KB

    • MD5

      139cddd2f9c63e0549ea7c7d88f016db

    • SHA1

      47e34652648004d350da903a48a44aff01682608

    • SHA256

      1742a2b31f27c7461e9736b1ae9c2982000510ebc7323cc22b2e4093c7fdfe88

    • SHA512

      225086a40e3e738edef9b04d25d51bbae3b80640bb63b146a8aa7000265f5381905cff8edd8be0e84cffc236a9be1afd9251d39ca8b69ed813090d24dfd4e072

    • SSDEEP

      3072:PWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1S:PWkWXV9wUezUroW+tCmCCfNGh

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks