Overview

overview

10

Static

static

5

b655f519ab...7f.exe

windows7-x64

10

b655f519ab...7f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b655f519abdf2476fab3cbcb82e11e6b7d635c17fb62619bfe4115f1d307277f

  • Size

    748KB

  • Sample

    221028-zvs1kafbg5

  • MD5

    093a0e31177183908584c9286e8b6ab3

  • SHA1

    0b3d3fbd15a00e9f11d31f47c5b810ca4faceb07

  • SHA256

    b655f519abdf2476fab3cbcb82e11e6b7d635c17fb62619bfe4115f1d307277f

  • SHA512

    bd38e240b817e72cec39330c740e8ea6737bdab5e020018e3bbe3d31239a768f9be995a1da1b75b620f717832b6602cb981d572e7d6c55b3b3df91b0efdbc20b

  • SSDEEP

    12288:BpqiC/2OGAtkCP4cejGSOpRK3CGgo9kDv1sYzln:Bpo/2+ttPJLfpRK3CGghn

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b655f519abdf2476fab3cbcb82e11e6b7d635c17fb62619bfe4115f1d307277f

    • Size

      748KB

    • MD5

      093a0e31177183908584c9286e8b6ab3

    • SHA1

      0b3d3fbd15a00e9f11d31f47c5b810ca4faceb07

    • SHA256

      b655f519abdf2476fab3cbcb82e11e6b7d635c17fb62619bfe4115f1d307277f

    • SHA512

      bd38e240b817e72cec39330c740e8ea6737bdab5e020018e3bbe3d31239a768f9be995a1da1b75b620f717832b6602cb981d572e7d6c55b3b3df91b0efdbc20b

    • SSDEEP

      12288:BpqiC/2OGAtkCP4cejGSOpRK3CGgo9kDv1sYzln:Bpo/2+ttPJLfpRK3CGghn

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks