Overview

overview

10

Static

static

8e1bb34419...34.exe

windows7-x64

10

8e1bb34419...34.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e1bb344197a7907e4c85737394a53cdcda53abf5acb02ea499139422a4a5834

  • Size

    78KB

  • Sample

    221029-1hbfesgher

  • MD5

    84a5ffe4bce68dae697a7c183b24e210

  • SHA1

    6cbae661362fa44fae070eb27eeae2bdef3521ea

  • SHA256

    8e1bb344197a7907e4c85737394a53cdcda53abf5acb02ea499139422a4a5834

  • SHA512

    733e218897af88ee169debd4c67a7d0bd53543675b39dea83feb08796d932e5f0623f1a6ebe81df7334d37c61b751097a37eca108d2df3aaa4eda91b16acdc14

  • SSDEEP

    768:npQNwC3BEddsEqOt/hyJF+x3BEJwRrPJisKl4qRr:peTce/U/hKYuKPJisKldRr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      8e1bb344197a7907e4c85737394a53cdcda53abf5acb02ea499139422a4a5834

    • Size

      78KB

    • MD5

      84a5ffe4bce68dae697a7c183b24e210

    • SHA1

      6cbae661362fa44fae070eb27eeae2bdef3521ea

    • SHA256

      8e1bb344197a7907e4c85737394a53cdcda53abf5acb02ea499139422a4a5834

    • SHA512

      733e218897af88ee169debd4c67a7d0bd53543675b39dea83feb08796d932e5f0623f1a6ebe81df7334d37c61b751097a37eca108d2df3aaa4eda91b16acdc14

    • SSDEEP

      768:npQNwC3BEddsEqOt/hyJF+x3BEJwRrPJisKl4qRr:peTce/U/hKYuKPJisKldRr

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks