Overview

overview

8

Static

static

97fe8f5edf...a1.exe

windows7-x64

8

97fe8f5edf...a1.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97fe8f5edf161a026720214998f095ab564871f43a75ef70d4963d6c8147dca1

  • Size

    91KB

  • Sample

    221129-fhcm9sfg28

  • MD5

    ea03c86beddd63fc65795178d33df9c3

  • SHA1

    14eb5fcbc306b5106e9f75fe0a1f5c84528a8a4a

  • SHA256

    97fe8f5edf161a026720214998f095ab564871f43a75ef70d4963d6c8147dca1

  • SHA512

    a8f5ab4eba1d5e060ca1d6aa1999676e7c348a81f57d8309d6ad247552c9c19efe9dbcc38ba0a87a86b2fff395c74e48f2165860f70f68becb74e3b60705705e

  • SSDEEP

    1536:4xOawsp8Ga0fIi/zNbTFTex+1Tjc6F/hpnqRa7CI:4Rp8cHNF+MPcMnnpT

Score
8/10
persistence

Malware Config

Targets

    • Target

      97fe8f5edf161a026720214998f095ab564871f43a75ef70d4963d6c8147dca1

    • Size

      91KB

    • MD5

      ea03c86beddd63fc65795178d33df9c3

    • SHA1

      14eb5fcbc306b5106e9f75fe0a1f5c84528a8a4a

    • SHA256

      97fe8f5edf161a026720214998f095ab564871f43a75ef70d4963d6c8147dca1

    • SHA512

      a8f5ab4eba1d5e060ca1d6aa1999676e7c348a81f57d8309d6ad247552c9c19efe9dbcc38ba0a87a86b2fff395c74e48f2165860f70f68becb74e3b60705705e

    • SSDEEP

      1536:4xOawsp8Ga0fIi/zNbTFTex+1Tjc6F/hpnqRa7CI:4Rp8cHNF+MPcMnnpT

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Sets DLL path for service in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks