Overview

overview

8

Static

static

244d9fa9e8...96.exe

windows7-x64

8

244d9fa9e8...96.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    244d9fa9e869cf565e9b6ff4c5167c07202f08d27b97d93343d8b4dcbf335f96

  • Size

    28KB

  • Sample

    221129-mcskvsaa76

  • MD5

    7a44fb476e8384284bbcdb3db820a0e4

  • SHA1

    8364513fc7a8855b9f22b6adcf67347671fe42f7

  • SHA256

    244d9fa9e869cf565e9b6ff4c5167c07202f08d27b97d93343d8b4dcbf335f96

  • SHA512

    00d899765fed7b95b62ed58d7ec71e128918f167bc8a843c67552098ac5cccef4b352c4430ee60873a1ca5c80c2513b04cbc03ef8022da44f52030d0b90c5a28

  • SSDEEP

    384:Py+ppmj1VlhX4WaXzfwwXNyiDx10jaQpRveBj0YUSHNpXoEqPQ0:Py+ppmjflhXDMzfww9VypRvyLVqp

Score
8/10
persistence

Malware Config

Targets

    • Target

      244d9fa9e869cf565e9b6ff4c5167c07202f08d27b97d93343d8b4dcbf335f96

    • Size

      28KB

    • MD5

      7a44fb476e8384284bbcdb3db820a0e4

    • SHA1

      8364513fc7a8855b9f22b6adcf67347671fe42f7

    • SHA256

      244d9fa9e869cf565e9b6ff4c5167c07202f08d27b97d93343d8b4dcbf335f96

    • SHA512

      00d899765fed7b95b62ed58d7ec71e128918f167bc8a843c67552098ac5cccef4b352c4430ee60873a1ca5c80c2513b04cbc03ef8022da44f52030d0b90c5a28

    • SSDEEP

      384:Py+ppmj1VlhX4WaXzfwwXNyiDx10jaQpRveBj0YUSHNpXoEqPQ0:Py+ppmjflhXDMzfww9VypRvyLVqp

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Deletes itself

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks