Overview

overview

10

Static

static

e55cb0bb1d...41.exe

windows7-x64

10

e55cb0bb1d...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e55cb0bb1ddb3ac6c67c7b15ef6064fa11b469ff0b9b696c86831b55f9e75341

  • Size

    312KB

  • Sample

    221129-gq7n2sfc6s

  • MD5

    20bd58fce2a943e3bc08e923e168eee0

  • SHA1

    a74ade7de011c3872099cde2f8f7feec042a8f26

  • SHA256

    e55cb0bb1ddb3ac6c67c7b15ef6064fa11b469ff0b9b696c86831b55f9e75341

  • SHA512

    6ebc7ae8986e115f3969c0a35eb453ee89bc4c30cdd26f0c58ad82fa6ba6142509a49a4cc830db42731fcb91d7b0d02edd5025c5b15ecfbc610a598df59f297f

  • SSDEEP

    6144:j1z30V7g209M3oCEqbF0gv9sPbxGOxHXzNMzN41z:jlEV7BSOEqh0gvKjRjSel

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e55cb0bb1ddb3ac6c67c7b15ef6064fa11b469ff0b9b696c86831b55f9e75341

    • Size

      312KB

    • MD5

      20bd58fce2a943e3bc08e923e168eee0

    • SHA1

      a74ade7de011c3872099cde2f8f7feec042a8f26

    • SHA256

      e55cb0bb1ddb3ac6c67c7b15ef6064fa11b469ff0b9b696c86831b55f9e75341

    • SHA512

      6ebc7ae8986e115f3969c0a35eb453ee89bc4c30cdd26f0c58ad82fa6ba6142509a49a4cc830db42731fcb91d7b0d02edd5025c5b15ecfbc610a598df59f297f

    • SSDEEP

      6144:j1z30V7g209M3oCEqbF0gv9sPbxGOxHXzNMzN41z:jlEV7BSOEqh0gvKjRjSel

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks