Overview

overview

10

Static

static

cf5ad53ffc...46.exe

windows7-x64

10

cf5ad53ffc...46.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf5ad53ffc000b620b08caf7375849f5b219e147cd1a60f5c1a7c595c6a0d646

  • Size

    276KB

  • Sample

    221019-1hz4sahga6

  • MD5

    92117a3d65026b1a1685086d951293f0

  • SHA1

    1184aef5ff3621301fe39d8cd3c849079335cac3

  • SHA256

    cf5ad53ffc000b620b08caf7375849f5b219e147cd1a60f5c1a7c595c6a0d646

  • SHA512

    d3336f8e4c77d2b2ca3eff8b1b42295f22ca283ab9bf18803b3aac1ae0d39551717db03fba8c836c79173da0e9b6452ec7b96c186876858c5e806dafcb50bf0d

  • SSDEEP

    6144:b/1HnOBywO+PnbfMIQFSQMX0Wy6XtdFCGJvi5w:bNQuU1XXdyvGJo

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      cf5ad53ffc000b620b08caf7375849f5b219e147cd1a60f5c1a7c595c6a0d646

    • Size

      276KB

    • MD5

      92117a3d65026b1a1685086d951293f0

    • SHA1

      1184aef5ff3621301fe39d8cd3c849079335cac3

    • SHA256

      cf5ad53ffc000b620b08caf7375849f5b219e147cd1a60f5c1a7c595c6a0d646

    • SHA512

      d3336f8e4c77d2b2ca3eff8b1b42295f22ca283ab9bf18803b3aac1ae0d39551717db03fba8c836c79173da0e9b6452ec7b96c186876858c5e806dafcb50bf0d

    • SSDEEP

      6144:b/1HnOBywO+PnbfMIQFSQMX0Wy6XtdFCGJvi5w:bNQuU1XXdyvGJo

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks