Overview

overview

10

Static

static

8

8980aff426...4e.exe

windows7-x64

10

8980aff426...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8980aff426c50fe5acae8c7dbedd25d6505089f2a7fb3c9643bd78a970959f4e

  • Size

    258KB

  • Sample

    221201-btjhqsfe7t

  • MD5

    5daf9a9836cb50fa54845486ecbc7306

  • SHA1

    f43133adbb23261040a78adfef01717ab3819bea

  • SHA256

    8980aff426c50fe5acae8c7dbedd25d6505089f2a7fb3c9643bd78a970959f4e

  • SHA512

    965e2fe4ffd83d11ac2768b35e031ae56aac6e500d03db26b10005b7861282d5e990d255088cfaf3f8edcf1b980a1dd38fa4f33e52c26f52f45b6f77663bcf35

  • SSDEEP

    6144:AAZjhKOftnMxuemFT+M+fHFsBu5tiJ1cZaoO5yFB0kOrFpfWx:jgmtnM+l+bdbtiJ1cDO5G0rWx

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      8980aff426c50fe5acae8c7dbedd25d6505089f2a7fb3c9643bd78a970959f4e

    • Size

      258KB

    • MD5

      5daf9a9836cb50fa54845486ecbc7306

    • SHA1

      f43133adbb23261040a78adfef01717ab3819bea

    • SHA256

      8980aff426c50fe5acae8c7dbedd25d6505089f2a7fb3c9643bd78a970959f4e

    • SHA512

      965e2fe4ffd83d11ac2768b35e031ae56aac6e500d03db26b10005b7861282d5e990d255088cfaf3f8edcf1b980a1dd38fa4f33e52c26f52f45b6f77663bcf35

    • SSDEEP

      6144:AAZjhKOftnMxuemFT+M+fHFsBu5tiJ1cZaoO5yFB0kOrFpfWx:jgmtnM+l+bdbtiJ1cDO5G0rWx

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks