Overview

overview

10

Static

static

eba5468534...ff.exe

windows7-x64

10

eba5468534...ff.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eba54685344fb75ce7cc1c1bbab125a287eb139640a8b9dbabe975a1270684ff

  • Size

    603KB

  • Sample

    221020-cq3b4sachp

  • MD5

    81065bd2f8f783eaabc3ce5c6d922fe0

  • SHA1

    1d8b9371820b51ab95b2bd907c19b3deb9c53321

  • SHA256

    eba54685344fb75ce7cc1c1bbab125a287eb139640a8b9dbabe975a1270684ff

  • SHA512

    5531b12121346ee98b227627dc5840a38727d2e71c400cd354cd332401b57ec4fcb2f36ead4e459695df919816d67b7545eae8d5a0ac081f63f8bd86b7d7583f

  • SSDEEP

    12288:U3TdtLW5WIj1dSSdFxsySXyMzBUWb9lx/9AgFLo8OW+rB:eDsj1YEcycJ9nPx/igxp+

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      eba54685344fb75ce7cc1c1bbab125a287eb139640a8b9dbabe975a1270684ff

    • Size

      603KB

    • MD5

      81065bd2f8f783eaabc3ce5c6d922fe0

    • SHA1

      1d8b9371820b51ab95b2bd907c19b3deb9c53321

    • SHA256

      eba54685344fb75ce7cc1c1bbab125a287eb139640a8b9dbabe975a1270684ff

    • SHA512

      5531b12121346ee98b227627dc5840a38727d2e71c400cd354cd332401b57ec4fcb2f36ead4e459695df919816d67b7545eae8d5a0ac081f63f8bd86b7d7583f

    • SSDEEP

      12288:U3TdtLW5WIj1dSSdFxsySXyMzBUWb9lx/9AgFLo8OW+rB:eDsj1YEcycJ9nPx/igxp+

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks