Overview

overview

8

Static

static

b10e8e7ed8...0a.exe

windows7-x64

8

b10e8e7ed8...0a.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b10e8e7ed854c3dcc261b8d520d4d47efef78828366720ee83541357a120720a

  • Size

    285KB

  • Sample

    221123-xqsg5aaf9y

  • MD5

    48f8d0a34ce28714b57072f3e1e148c0

  • SHA1

    fb8fb8f52404dcd0056ca81500142b381a0acaa6

  • SHA256

    b10e8e7ed854c3dcc261b8d520d4d47efef78828366720ee83541357a120720a

  • SHA512

    6f5bb3aa5e3aa6bca28f742e6a2489a0d37fad403bd410e5c12ae78c2553f08230c1c561664f71892d1571017205cc054a131ea1a1906d500280e3bbe3f5f225

  • SSDEEP

    6144:c7mmEfwgeIcVH0pwpMeWB/c0/C05mivbm3rP7Tx:c7zUwgeDVH0ppeW2mC05miTi77F

Score
8/10
persistence

Malware Config

Targets

    • Target

      b10e8e7ed854c3dcc261b8d520d4d47efef78828366720ee83541357a120720a

    • Size

      285KB

    • MD5

      48f8d0a34ce28714b57072f3e1e148c0

    • SHA1

      fb8fb8f52404dcd0056ca81500142b381a0acaa6

    • SHA256

      b10e8e7ed854c3dcc261b8d520d4d47efef78828366720ee83541357a120720a

    • SHA512

      6f5bb3aa5e3aa6bca28f742e6a2489a0d37fad403bd410e5c12ae78c2553f08230c1c561664f71892d1571017205cc054a131ea1a1906d500280e3bbe3f5f225

    • SSDEEP

      6144:c7mmEfwgeIcVH0pwpMeWB/c0/C05mivbm3rP7Tx:c7zUwgeDVH0ppeW2mC05miTi77F

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks