Overview

overview

10

Static

static

96b14e8904...b5.exe

windows7-x64

10

96b14e8904...b5.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96b14e8904eecb76c7d839d697d34364356319a44f453427c2c332cf513cdab5

  • Size

    244KB

  • Sample

    221020-mcb8wahbfj

  • MD5

    9049c3eae0b28a46cba4109d15d43715

  • SHA1

    e40208348a1cea6b10b1a992d6ac1658417dc2d4

  • SHA256

    96b14e8904eecb76c7d839d697d34364356319a44f453427c2c332cf513cdab5

  • SHA512

    e117785a5ec8381f0ce1c5bada2b81ae9438f6e7b3b498a1a7eef4327cda4c4b2c37728a51491db296eb6dd2d808e21edea7798743dc65ae6a3066082d807d4a

  • SSDEEP

    6144:YBeqa47AOiMY+ezjcFOxUPrGbj13GIMHb1M/oiU3:YseGlljcFOxkrGbj13GIMHb1+q

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      96b14e8904eecb76c7d839d697d34364356319a44f453427c2c332cf513cdab5

    • Size

      244KB

    • MD5

      9049c3eae0b28a46cba4109d15d43715

    • SHA1

      e40208348a1cea6b10b1a992d6ac1658417dc2d4

    • SHA256

      96b14e8904eecb76c7d839d697d34364356319a44f453427c2c332cf513cdab5

    • SHA512

      e117785a5ec8381f0ce1c5bada2b81ae9438f6e7b3b498a1a7eef4327cda4c4b2c37728a51491db296eb6dd2d808e21edea7798743dc65ae6a3066082d807d4a

    • SSDEEP

      6144:YBeqa47AOiMY+ezjcFOxUPrGbj13GIMHb1M/oiU3:YseGlljcFOxkrGbj13GIMHb1+q

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks