Overview

overview

10

Static

static

52cc8b9da3...36.exe

windows7-x64

10

52cc8b9da3...36.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52cc8b9da33ddd5746e47ccee7beb62bf48fbadbc10efb436ec82eee4db60336

  • Size

    901KB

  • Sample

    221123-w1z5aade23

  • MD5

    025b64dd751bd9278d8005b18076bec8

  • SHA1

    9526be88916f8713d5eb0699652b1ae49ebaf03a

  • SHA256

    52cc8b9da33ddd5746e47ccee7beb62bf48fbadbc10efb436ec82eee4db60336

  • SHA512

    42385631fa7fe25b25eae89dfdb012d249dda820c8bc0807d68b2a18c2fdba0f938c9c44854ac21a0539822f091ae4dcd443aa13dcbff5b0b0fc71451732ceba

  • SSDEEP

    12288:xeXr/Cm+XQ9i8aMVkUet7EwBI+APuALDbFmZcZlyNGUO:xGr/Cm+X18zVkUetVI5uiDbFmZu4PO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      52cc8b9da33ddd5746e47ccee7beb62bf48fbadbc10efb436ec82eee4db60336

    • Size

      901KB

    • MD5

      025b64dd751bd9278d8005b18076bec8

    • SHA1

      9526be88916f8713d5eb0699652b1ae49ebaf03a

    • SHA256

      52cc8b9da33ddd5746e47ccee7beb62bf48fbadbc10efb436ec82eee4db60336

    • SHA512

      42385631fa7fe25b25eae89dfdb012d249dda820c8bc0807d68b2a18c2fdba0f938c9c44854ac21a0539822f091ae4dcd443aa13dcbff5b0b0fc71451732ceba

    • SSDEEP

      12288:xeXr/Cm+XQ9i8aMVkUet7EwBI+APuALDbFmZcZlyNGUO:xGr/Cm+X18zVkUetVI5uiDbFmZu4PO

    Score
    10/10
    evasionpersistence

    • Modifies system executable filetype association

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks