Overview

overview

10

Static

static

8

6207eff641...b7.exe

windows7-x64

10

6207eff641...b7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6207eff6413822ac5729a2ebaf434cb5f655af7e5cc9c94843dd9abe72df17b7

  • Size

    369KB

  • Sample

    221124-avny6sfd47

  • MD5

    25fbf29d0310c4e58bf8560a07854d91

  • SHA1

    2566666ebf790697ed7a4b885e88b4ae7869f6b6

  • SHA256

    6207eff6413822ac5729a2ebaf434cb5f655af7e5cc9c94843dd9abe72df17b7

  • SHA512

    cc8f1dc29e471273ff7bda4157fbb6a46e10df088e02cb69c764724acbe4e0853043788196a14bce77d4687b37d105f5897169b9d71f18cbbde1e799273e5eb7

  • SSDEEP

    6144:O2kq2tz1DBz5gga7egJlrtyp/0bJoNsOZ930DskP/vl4/mTCEWCEfrjRT/msBfZY:O82tz1DBz5gga7egJlrtyp/0bJoNsOZk

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      6207eff6413822ac5729a2ebaf434cb5f655af7e5cc9c94843dd9abe72df17b7

    • Size

      369KB

    • MD5

      25fbf29d0310c4e58bf8560a07854d91

    • SHA1

      2566666ebf790697ed7a4b885e88b4ae7869f6b6

    • SHA256

      6207eff6413822ac5729a2ebaf434cb5f655af7e5cc9c94843dd9abe72df17b7

    • SHA512

      cc8f1dc29e471273ff7bda4157fbb6a46e10df088e02cb69c764724acbe4e0853043788196a14bce77d4687b37d105f5897169b9d71f18cbbde1e799273e5eb7

    • SSDEEP

      6144:O2kq2tz1DBz5gga7egJlrtyp/0bJoNsOZ930DskP/vl4/mTCEWCEfrjRT/msBfZY:O82tz1DBz5gga7egJlrtyp/0bJoNsOZk

    Score
    10/10
    evasionpersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks