Overview

overview

10

Static

static

182f0dbba9...3c.exe

windows7-x64

10

182f0dbba9...3c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    182f0dbba97d606a26b3ea62d1a889176a6d0487e48816403b7d93ecbcc2533c

  • Size

    544KB

  • Sample

    221107-b1es5abfb6

  • MD5

    0e2060e9b5f9668dd3ecf10f882595dd

  • SHA1

    10c4604b22584bc952210051e24ca62b41e1978c

  • SHA256

    182f0dbba97d606a26b3ea62d1a889176a6d0487e48816403b7d93ecbcc2533c

  • SHA512

    95c8fe6df904f4630a75b2abd8d212a9e31b671c6c38956fe2278e1038fc50acf817a08c641cefcbffd2461a604ccccbaa9b6c4d950b408c92d9eea0ed709146

  • SSDEEP

    6144:bjEDyVUtKq9o8BC2N6tdTTTbfxXuzJwGhrBN+0/:UmVUtKq9o8BC2N6tdTTTbfxwmGhrDd/

Score
10/10
persistence

Malware Config

Targets

    • Target

      182f0dbba97d606a26b3ea62d1a889176a6d0487e48816403b7d93ecbcc2533c

    • Size

      544KB

    • MD5

      0e2060e9b5f9668dd3ecf10f882595dd

    • SHA1

      10c4604b22584bc952210051e24ca62b41e1978c

    • SHA256

      182f0dbba97d606a26b3ea62d1a889176a6d0487e48816403b7d93ecbcc2533c

    • SHA512

      95c8fe6df904f4630a75b2abd8d212a9e31b671c6c38956fe2278e1038fc50acf817a08c641cefcbffd2461a604ccccbaa9b6c4d950b408c92d9eea0ed709146

    • SSDEEP

      6144:bjEDyVUtKq9o8BC2N6tdTTTbfxXuzJwGhrBN+0/:UmVUtKq9o8BC2N6tdTTTbfxwmGhrDd/

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks