Overview

overview

10

Static

static

3f952f8135...ba.exe

windows7-x64

10

3f952f8135...ba.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f952f8135f03487e0bde7afcbbfaa302190f809dddce3f30e77e44bab2f3cba

  • Size

    244KB

  • Sample

    221019-rgx4csbbb7

  • MD5

    82ae630a2dd1c7d69044b72d26eaa2db

  • SHA1

    b1ffe01a6181cb61337c7ca89bfeb18dd0fd4036

  • SHA256

    3f952f8135f03487e0bde7afcbbfaa302190f809dddce3f30e77e44bab2f3cba

  • SHA512

    09f8816fe0848e02c99772e3c8f4981d53fecaa224385747251002f9daf3d838a5fda56c1f24ca72a65634effb0c423e865076f50562d9c38cda59f1f6124496

  • SSDEEP

    6144:+1yUN7pmPUk9VMwXHOCgs+ej/4+zBNnmjf5h:+Q8pQ96w+ns+GwoNnmH

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3f952f8135f03487e0bde7afcbbfaa302190f809dddce3f30e77e44bab2f3cba

    • Size

      244KB

    • MD5

      82ae630a2dd1c7d69044b72d26eaa2db

    • SHA1

      b1ffe01a6181cb61337c7ca89bfeb18dd0fd4036

    • SHA256

      3f952f8135f03487e0bde7afcbbfaa302190f809dddce3f30e77e44bab2f3cba

    • SHA512

      09f8816fe0848e02c99772e3c8f4981d53fecaa224385747251002f9daf3d838a5fda56c1f24ca72a65634effb0c423e865076f50562d9c38cda59f1f6124496

    • SSDEEP

      6144:+1yUN7pmPUk9VMwXHOCgs+ej/4+zBNnmjf5h:+Q8pQ96w+ns+GwoNnmH

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks