Overview

overview

10

Static

static

177678f27f...a2.exe

windows7-x64

177678f27f...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    177678f27f3114061f5fa3a7bad40ff4a9e91c1411a8ff242abe9d743461f7a2

  • Size

    76KB

  • Sample

    221123-mrgrxaeg92

  • MD5

    863f167f652c9c29de71b65c80b5bfbf

  • SHA1

    1aff6f7cab937c0b96f61ecfc88dc4564617f300

  • SHA256

    177678f27f3114061f5fa3a7bad40ff4a9e91c1411a8ff242abe9d743461f7a2

  • SHA512

    efd7775583c7a9ac16daf0b4d542ba13b42fb4458aebe84516475966b8f016d8a48864feff2a43ee059126a7a77f232aa09cace12fda05ab081ad46f425da2e0

  • SSDEEP

    768:XembNRqsuhlGOBrhgFwumSCbxTGy/BBGg4NKJJKqUThbJ32+ve7i40vN0TlT+Xkj:5nqdu3abBGy3G8V0iuo2i

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      177678f27f3114061f5fa3a7bad40ff4a9e91c1411a8ff242abe9d743461f7a2

    • Size

      76KB

    • MD5

      863f167f652c9c29de71b65c80b5bfbf

    • SHA1

      1aff6f7cab937c0b96f61ecfc88dc4564617f300

    • SHA256

      177678f27f3114061f5fa3a7bad40ff4a9e91c1411a8ff242abe9d743461f7a2

    • SHA512

      efd7775583c7a9ac16daf0b4d542ba13b42fb4458aebe84516475966b8f016d8a48864feff2a43ee059126a7a77f232aa09cace12fda05ab081ad46f425da2e0

    • SSDEEP

      768:XembNRqsuhlGOBrhgFwumSCbxTGy/BBGg4NKJJKqUThbJ32+ve7i40vN0TlT+Xkj:5nqdu3abBGy3G8V0iuo2i

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks