Overview

overview

10

Static

static

653eb6fe31...8d.exe

windows7-x64

10

653eb6fe31...8d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    653eb6fe3116f82973600f05cc71c6bd18e8c3675ced5a08f4d13e28b9c7238d

  • Size

    48KB

  • Sample

    221030-fscq1sedbl

  • MD5

    a296787638a5a36759ab660a9903c84c

  • SHA1

    d65ca8aeeb730565efae67b7f3e4e53b1abd8cf4

  • SHA256

    653eb6fe3116f82973600f05cc71c6bd18e8c3675ced5a08f4d13e28b9c7238d

  • SHA512

    504b02177edf9a061a07f56975e0e554168f68b51ac55d9e232156f74409148901e50e1652e107ca53700144ad1f71456801418a61d6546b10eb10e0db22f64e

  • SSDEEP

    768:yHnnRCm4Fxk3McFTlgasR8hhqmT9TxCetniSjEcHn:on4m4LiqR8h+oE2n

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      653eb6fe3116f82973600f05cc71c6bd18e8c3675ced5a08f4d13e28b9c7238d

    • Size

      48KB

    • MD5

      a296787638a5a36759ab660a9903c84c

    • SHA1

      d65ca8aeeb730565efae67b7f3e4e53b1abd8cf4

    • SHA256

      653eb6fe3116f82973600f05cc71c6bd18e8c3675ced5a08f4d13e28b9c7238d

    • SHA512

      504b02177edf9a061a07f56975e0e554168f68b51ac55d9e232156f74409148901e50e1652e107ca53700144ad1f71456801418a61d6546b10eb10e0db22f64e

    • SSDEEP

      768:yHnnRCm4Fxk3McFTlgasR8hhqmT9TxCetniSjEcHn:on4m4LiqR8h+oE2n

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks