Overview

overview

10

Static

static

e9e9968731...e7.exe

windows7-x64

10

e9e9968731...e7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9e9968731405d16dd6a0de4373a207f7ee30a54d07264778d91d1ab226b8fe7

  • Size

    70KB

  • Sample

    221123-p13rvafg61

  • MD5

    66d65bf3704f38fef30da245e34e7285

  • SHA1

    130bc28053e50bd1a5ef025dd768154a1ed94200

  • SHA256

    e9e9968731405d16dd6a0de4373a207f7ee30a54d07264778d91d1ab226b8fe7

  • SHA512

    b56fbdd7bc865f067ecee3cccddf663291fc8739a5c26bce98c3a1ca1caca6e5177f32d9ad0d14cd4f2e20e4fd9562cae893171f3cd0495666652777e35ee52f

  • SSDEEP

    768:z4HZYcwZ1aCrnZJY6c96vi79xRkNiQNlfPnw4abyx5N5hvX+fR1:SUrnzj019zkNT3qyzhmp1

Score
10/10
persistence

Malware Config

Targets

    • Target

      e9e9968731405d16dd6a0de4373a207f7ee30a54d07264778d91d1ab226b8fe7

    • Size

      70KB

    • MD5

      66d65bf3704f38fef30da245e34e7285

    • SHA1

      130bc28053e50bd1a5ef025dd768154a1ed94200

    • SHA256

      e9e9968731405d16dd6a0de4373a207f7ee30a54d07264778d91d1ab226b8fe7

    • SHA512

      b56fbdd7bc865f067ecee3cccddf663291fc8739a5c26bce98c3a1ca1caca6e5177f32d9ad0d14cd4f2e20e4fd9562cae893171f3cd0495666652777e35ee52f

    • SSDEEP

      768:z4HZYcwZ1aCrnZJY6c96vi79xRkNiQNlfPnw4abyx5N5hvX+fR1:SUrnzj019zkNT3qyzhmp1

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks