Overview

overview

10

Static

static

c83fdf91d8...66.exe

windows7-x64

10

c83fdf91d8...66.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66

  • Size

    252KB

  • Sample

    221123-vceyrsgf37

  • MD5

    44512164c56f4930383b7d13a7278690

  • SHA1

    c758b0593ad0048630b07f4268a6a66d70f458bf

  • SHA256

    c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66

  • SHA512

    b204d7aa285c5284688e0237708f8fe431b7f1b841e899fb9e2b7436ccdfc3bc72f3478391016615dfb9483b50b17d7d2df3676f275d1aaeafb09496af3a07d1

  • SSDEEP

    6144:oeiQL9y4qam1ZeTEf/ab8PXV2maMPaAmD5rv3kjCGc/rgt2T1aaJjZUmG:oeZL9yNaitf/ab8/kmaMPaAerv3E2jZU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66

    • Size

      252KB

    • MD5

      44512164c56f4930383b7d13a7278690

    • SHA1

      c758b0593ad0048630b07f4268a6a66d70f458bf

    • SHA256

      c83fdf91d8cf334609c6b58008d6c866ac658e0b0899a5ce6a93d4ac4baf8c66

    • SHA512

      b204d7aa285c5284688e0237708f8fe431b7f1b841e899fb9e2b7436ccdfc3bc72f3478391016615dfb9483b50b17d7d2df3676f275d1aaeafb09496af3a07d1

    • SSDEEP

      6144:oeiQL9y4qam1ZeTEf/ab8PXV2maMPaAmD5rv3kjCGc/rgt2T1aaJjZUmG:oeZL9yNaitf/ab8/kmaMPaAerv3E2jZU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks