Overview

overview

10

Static

static

6227070d3f...54.exe

windows7-x64

10

6227070d3f...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6227070d3faaded99d0ef272b212ee6c00813c7b2d32588ba1c7a547ab5d6854

  • Size

    256KB

  • Sample

    221129-kfrfvsfd9v

  • MD5

    903a4074b8b552ad34be35a3afc8c0c4

  • SHA1

    7e92803e5d04955d35d1907f4103202009e65422

  • SHA256

    6227070d3faaded99d0ef272b212ee6c00813c7b2d32588ba1c7a547ab5d6854

  • SHA512

    3f4d065146ec695204f455cae46e8d614a0f754f87a148a493fd64c29cd8b72c09ff6ebd5528d88541a9c6f957ba854b9b88ecf26f8ebda5b4df3560b8fbfa4b

  • SSDEEP

    6144:GmQ4cV6zoKpvSt4xudvE1SN2uo4VpFSCQVqicxYfPvV:9SszoK83dvkao2FiqicM

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      6227070d3faaded99d0ef272b212ee6c00813c7b2d32588ba1c7a547ab5d6854

    • Size

      256KB

    • MD5

      903a4074b8b552ad34be35a3afc8c0c4

    • SHA1

      7e92803e5d04955d35d1907f4103202009e65422

    • SHA256

      6227070d3faaded99d0ef272b212ee6c00813c7b2d32588ba1c7a547ab5d6854

    • SHA512

      3f4d065146ec695204f455cae46e8d614a0f754f87a148a493fd64c29cd8b72c09ff6ebd5528d88541a9c6f957ba854b9b88ecf26f8ebda5b4df3560b8fbfa4b

    • SSDEEP

      6144:GmQ4cV6zoKpvSt4xudvE1SN2uo4VpFSCQVqicxYfPvV:9SszoK83dvkao2FiqicM

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks