Overview

overview

10

Static

static

2ed23c56df...c9.exe

windows7-x64

10

2ed23c56df...c9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ed23c56dfbc84a19755c690a86e5dd13df4cd778774fd8891cf745a36eefcc9

  • Size

    214KB

  • Sample

    221123-2vtcfadh9w

  • MD5

    53b1478068e337fc348324a335891ac0

  • SHA1

    12ead8a215eccf18c4857e76efac81a62fad9574

  • SHA256

    2ed23c56dfbc84a19755c690a86e5dd13df4cd778774fd8891cf745a36eefcc9

  • SHA512

    acd1b2d0c3bc0b317cfd23fa2e630d678dcbede136a5a8cf55427983e033ca2df6c65986d5cdc9243333622a02b90fd682dcd83e1c2b27cffc62aa2d6be76d10

  • SSDEEP

    3072:ZSDuGtVVkJpJpkmMZSlYOUxALuiWGjolObzUtwp34m:2wJpJNYOUxku1GzzU24m

Score
10/10
evasionpersistence

Malware Config

Extracted

Credentials

  • Protocol:     smtp
  • Host:
    smtp.gmail.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    mehmet1998

Targets

    • Target

      2ed23c56dfbc84a19755c690a86e5dd13df4cd778774fd8891cf745a36eefcc9

    • Size

      214KB

    • MD5

      53b1478068e337fc348324a335891ac0

    • SHA1

      12ead8a215eccf18c4857e76efac81a62fad9574

    • SHA256

      2ed23c56dfbc84a19755c690a86e5dd13df4cd778774fd8891cf745a36eefcc9

    • SHA512

      acd1b2d0c3bc0b317cfd23fa2e630d678dcbede136a5a8cf55427983e033ca2df6c65986d5cdc9243333622a02b90fd682dcd83e1c2b27cffc62aa2d6be76d10

    • SSDEEP

      3072:ZSDuGtVVkJpJpkmMZSlYOUxALuiWGjolObzUtwp34m:2wJpJNYOUxku1GzzU24m

    Score
    10/10
    evasionpersistence

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks