Overview

overview

8

Static

static

351cd194ca...5f.exe

windows7-x64

8

351cd194ca...5f.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    351cd194caefb6447e96e2ce829d3e804e50d3422b6d16d593d738338254a25f

  • Size

    176KB

  • Sample

    221107-y3deeafhg4

  • MD5

    0adc31b293bee217af1878ed64423b48

  • SHA1

    0e9169dff616826167f17fbf175dddec8ff0bfd2

  • SHA256

    351cd194caefb6447e96e2ce829d3e804e50d3422b6d16d593d738338254a25f

  • SHA512

    398ab562db9a11936584c920eb9755cca378aa3d5d7c3b7732dfbf0ac30c50c1936f9a737e6848d98c90164e2484b2cc526f012b5af4eaa8165d2db81da16254

  • SSDEEP

    1536:v05AakFmuH8d3pDfT9tdXVC8/o5cJ45cL/I5l8IxdgtoeDpveL1bEOCTui:vagmvJfdXVCkLicDIUIx6thDpKE1ui

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      351cd194caefb6447e96e2ce829d3e804e50d3422b6d16d593d738338254a25f

    • Size

      176KB

    • MD5

      0adc31b293bee217af1878ed64423b48

    • SHA1

      0e9169dff616826167f17fbf175dddec8ff0bfd2

    • SHA256

      351cd194caefb6447e96e2ce829d3e804e50d3422b6d16d593d738338254a25f

    • SHA512

      398ab562db9a11936584c920eb9755cca378aa3d5d7c3b7732dfbf0ac30c50c1936f9a737e6848d98c90164e2484b2cc526f012b5af4eaa8165d2db81da16254

    • SSDEEP

      1536:v05AakFmuH8d3pDfT9tdXVC8/o5cJ45cL/I5l8IxdgtoeDpveL1bEOCTui:vagmvJfdXVCkLicDIUIx6thDpKE1ui

    Score
    8/10
    evasionpersistence

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks