Overview

overview

10

Static

static

9e9700974d...73.exe

windows7-x64

10

9e9700974d...73.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9e9700974d09ab47c8cc4ec5ed4d201b9993503a8e02c1127f8f88c1ca8e6173

  • Size

    472KB

  • Sample

    221106-jt1q1sagh9

  • MD5

    4000967fcd88bb5ec175aabc1548f6c3

  • SHA1

    5a88f410264b40f4c73fafa36b6d2c373a341075

  • SHA256

    9e9700974d09ab47c8cc4ec5ed4d201b9993503a8e02c1127f8f88c1ca8e6173

  • SHA512

    2a3f641190716a518b9ee8e203e2c7de8240f3623f8234b8dee3e07b881d9f0a0b2e5b6923b709a7e506de3665b5aeca083fb9cb76343b927c94a86b8880b218

  • SSDEEP

    6144:rjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJUdh8iecjfRF/OK4JYJlv:lRDc3yWDNU+YUznzNjElijjfRF/NQyv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      9e9700974d09ab47c8cc4ec5ed4d201b9993503a8e02c1127f8f88c1ca8e6173

    • Size

      472KB

    • MD5

      4000967fcd88bb5ec175aabc1548f6c3

    • SHA1

      5a88f410264b40f4c73fafa36b6d2c373a341075

    • SHA256

      9e9700974d09ab47c8cc4ec5ed4d201b9993503a8e02c1127f8f88c1ca8e6173

    • SHA512

      2a3f641190716a518b9ee8e203e2c7de8240f3623f8234b8dee3e07b881d9f0a0b2e5b6923b709a7e506de3665b5aeca083fb9cb76343b927c94a86b8880b218

    • SSDEEP

      6144:rjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJUdh8iecjfRF/OK4JYJlv:lRDc3yWDNU+YUznzNjElijjfRF/NQyv

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks