Overview

overview

10

Static

static

39bbb883dd...93.exe

windows7-x64

10

39bbb883dd...93.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39bbb883dd3ea3d4c575ce312c9a60ae695598b0fb09953839572b87127f0893

  • Size

    111KB

  • Sample

    221020-twjwdsddd4

  • MD5

    a039fa79b314c14fa9d97974a37a99b7

  • SHA1

    36033f8286075129fac6b1962aacf6e38a42a248

  • SHA256

    39bbb883dd3ea3d4c575ce312c9a60ae695598b0fb09953839572b87127f0893

  • SHA512

    e8ec0a75d126b66953aa2932e679931423ada8949ce21480d9ed00593f693f33956edb2e12f9d2350dde9735845de7f9111436779b43b60427028ab8e51ab1f6

  • SSDEEP

    1536:2LqlQMjurZeH1K/Gy97KJCZBwu91ungxK6FEMMcC/jmyN1WJ1rkWmngFSpKKMf5M:zZjurA1K+w7KMuu1F+/jmSkmngV5CvMc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      39bbb883dd3ea3d4c575ce312c9a60ae695598b0fb09953839572b87127f0893

    • Size

      111KB

    • MD5

      a039fa79b314c14fa9d97974a37a99b7

    • SHA1

      36033f8286075129fac6b1962aacf6e38a42a248

    • SHA256

      39bbb883dd3ea3d4c575ce312c9a60ae695598b0fb09953839572b87127f0893

    • SHA512

      e8ec0a75d126b66953aa2932e679931423ada8949ce21480d9ed00593f693f33956edb2e12f9d2350dde9735845de7f9111436779b43b60427028ab8e51ab1f6

    • SSDEEP

      1536:2LqlQMjurZeH1K/Gy97KJCZBwu91ungxK6FEMMcC/jmyN1WJ1rkWmngFSpKKMf5M:zZjurA1K+w7KMuu1F+/jmSkmngV5CvMc

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks