Overview

overview

10

Static

static

5da5800a54...f5.exe

windows7-x64

10

5da5800a54...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5da5800a540786a00d8a63ab079f28482bdde7f77ef4460bc4d13e488e70fbf5

  • Size

    888KB

  • Sample

    221124-ba6txsbg8z

  • MD5

    441ef2ee699135a4d809ecb917a2de68

  • SHA1

    5c56e22a4615e2fe60fa24046c6f95d969d63c0f

  • SHA256

    5da5800a540786a00d8a63ab079f28482bdde7f77ef4460bc4d13e488e70fbf5

  • SHA512

    7f68df44451b6d5d14ffae1479bc91a8e6c81a76571af8a26a8e37f861ef6203fed071d46b40820e60e1c1ab3c17eb0bb61db279eddc04a68802e8edda72d822

  • SSDEEP

    6144:k3i8X7pt4Oti0BWmKWIBtOcI9SSbA+cuXhrwNAMStH53D8:k3TdtLW5WIj1YSSdFxevS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5da5800a540786a00d8a63ab079f28482bdde7f77ef4460bc4d13e488e70fbf5

    • Size

      888KB

    • MD5

      441ef2ee699135a4d809ecb917a2de68

    • SHA1

      5c56e22a4615e2fe60fa24046c6f95d969d63c0f

    • SHA256

      5da5800a540786a00d8a63ab079f28482bdde7f77ef4460bc4d13e488e70fbf5

    • SHA512

      7f68df44451b6d5d14ffae1479bc91a8e6c81a76571af8a26a8e37f861ef6203fed071d46b40820e60e1c1ab3c17eb0bb61db279eddc04a68802e8edda72d822

    • SSDEEP

      6144:k3i8X7pt4Oti0BWmKWIBtOcI9SSbA+cuXhrwNAMStH53D8:k3TdtLW5WIj1YSSdFxevS

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies firewall policy service

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks