Overview

overview

10

Static

static

44a1cf41f4...71.exe

windows7-x64

10

44a1cf41f4...71.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44a1cf41f44496c5b75a34c3d57b02cb07465d3738298e2dac2cd17959b2ae71

  • Size

    549KB

  • Sample

    221125-cndkzaea62

  • MD5

    21c44244f5dd7a72bbe58e5981bafef8

  • SHA1

    c67b3a0e1b2b02f0f028c0cfdc3f91e6798956d6

  • SHA256

    44a1cf41f44496c5b75a34c3d57b02cb07465d3738298e2dac2cd17959b2ae71

  • SHA512

    1b0f697b8d17ede092fa2288a3654628d27aced2520df35f919df2581ab4b24d43dcbc579763ae41c8f3a87f9ff47571f42ecfe8961ecd6c7502ee336b5d0a09

  • SSDEEP

    12288:VyN2c9GkgS4dswyuHJic+YXrOrFIiTmZPN7+pLCQn:y2dswyupicVaroF7+pL5

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      44a1cf41f44496c5b75a34c3d57b02cb07465d3738298e2dac2cd17959b2ae71

    • Size

      549KB

    • MD5

      21c44244f5dd7a72bbe58e5981bafef8

    • SHA1

      c67b3a0e1b2b02f0f028c0cfdc3f91e6798956d6

    • SHA256

      44a1cf41f44496c5b75a34c3d57b02cb07465d3738298e2dac2cd17959b2ae71

    • SHA512

      1b0f697b8d17ede092fa2288a3654628d27aced2520df35f919df2581ab4b24d43dcbc579763ae41c8f3a87f9ff47571f42ecfe8961ecd6c7502ee336b5d0a09

    • SSDEEP

      12288:VyN2c9GkgS4dswyuHJic+YXrOrFIiTmZPN7+pLCQn:y2dswyupicVaroF7+pL5

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks