Overview

overview

10

Static

static

6811f2cb0a...5a.exe

windows7-x64

10

6811f2cb0a...5a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6811f2cb0a44d9a86b39d82ac52fd163740469105f68400f80e7439bceeb175a

  • Size

    1.1MB

  • Sample

    221201-epnhnscg32

  • MD5

    379f9e9da8777d1ce68c3d5a6840b0ea

  • SHA1

    1bd13e84506906e906ff6088800efa9cdb171a1c

  • SHA256

    6811f2cb0a44d9a86b39d82ac52fd163740469105f68400f80e7439bceeb175a

  • SHA512

    b2eccb3d8d0630decf7724ce737712c9733da7806eed112d84a4d5b82adf734f613bc3e1774f01cdcb877cd345e500d051d60e911d137db4143caed76f54eae9

  • SSDEEP

    24576:eZncX5lEILuXVW1uPKY0vsV9yX8nUuG9c:eBcXMIQVWESYWGYfr

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      6811f2cb0a44d9a86b39d82ac52fd163740469105f68400f80e7439bceeb175a

    • Size

      1.1MB

    • MD5

      379f9e9da8777d1ce68c3d5a6840b0ea

    • SHA1

      1bd13e84506906e906ff6088800efa9cdb171a1c

    • SHA256

      6811f2cb0a44d9a86b39d82ac52fd163740469105f68400f80e7439bceeb175a

    • SHA512

      b2eccb3d8d0630decf7724ce737712c9733da7806eed112d84a4d5b82adf734f613bc3e1774f01cdcb877cd345e500d051d60e911d137db4143caed76f54eae9

    • SSDEEP

      24576:eZncX5lEILuXVW1uPKY0vsV9yX8nUuG9c:eBcXMIQVWESYWGYfr

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks