Overview

overview

10

Static

static

0769c60824...42.exe

windows7-x64

10

0769c60824...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0769c60824b07e659b94285536a7a046dc95371d184c8ee3d5cb5b1c88f51d42

  • Size

    85KB

  • Sample

    221125-peah6sfg66

  • MD5

    ad2ac8342b8b67c8acb509a5b3e1e7ef

  • SHA1

    26b3f68e3ab6c0e42d0fef09144c3871a55bfa0f

  • SHA256

    0769c60824b07e659b94285536a7a046dc95371d184c8ee3d5cb5b1c88f51d42

  • SHA512

    223aa6a6a85292d9f63e8e4493ca5f72b72f41f3244453e742d391b48a5213b5279d95cb8400db463dbbabe06a08c94de2e02ed53aeb4df3e1d073b8eee850d5

  • SSDEEP

    1536:ifcshNxsQaEbzEK0jpApeWy3idpmbMjrLOgtuBIq8:YcPjUe3wUwLOgtuBT8

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0769c60824b07e659b94285536a7a046dc95371d184c8ee3d5cb5b1c88f51d42

    • Size

      85KB

    • MD5

      ad2ac8342b8b67c8acb509a5b3e1e7ef

    • SHA1

      26b3f68e3ab6c0e42d0fef09144c3871a55bfa0f

    • SHA256

      0769c60824b07e659b94285536a7a046dc95371d184c8ee3d5cb5b1c88f51d42

    • SHA512

      223aa6a6a85292d9f63e8e4493ca5f72b72f41f3244453e742d391b48a5213b5279d95cb8400db463dbbabe06a08c94de2e02ed53aeb4df3e1d073b8eee850d5

    • SSDEEP

      1536:ifcshNxsQaEbzEK0jpApeWy3idpmbMjrLOgtuBIq8:YcPjUe3wUwLOgtuBT8

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks