Overview

overview

8

Static

static

893571b91b...ac.exe

windows7-x64

8

893571b91b...ac.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    893571b91b0375f92e73bdaddc55e2f36a7f398e24f362219a5beced548679ac

  • Size

    136KB

  • Sample

    221201-r6k54ach8y

  • MD5

    bb69a38ccc2cf20b37a7139371f9609e

  • SHA1

    7cf7dfee89c284cfd9c97af6c58787f7c65abed7

  • SHA256

    893571b91b0375f92e73bdaddc55e2f36a7f398e24f362219a5beced548679ac

  • SHA512

    59e048379ea37e2646a4ae5dcdbc548995dc61231cea40b96d1d790dd745c1b464a88602ef4bef776f6865844e6621a8b5e0a4092a472ce404fd9b456ab0b898

  • SSDEEP

    768:DE30Ur8/7tEaWcArSwaydTb0EroSd3QXGsBS4sZFFSUv6GfEK+RsWW2qTN4lvCyI:chdPeXonnUStQXDI4spvVp+N8NECtH3

Score
8/10
persistence

Malware Config

Targets

    • Target

      893571b91b0375f92e73bdaddc55e2f36a7f398e24f362219a5beced548679ac

    • Size

      136KB

    • MD5

      bb69a38ccc2cf20b37a7139371f9609e

    • SHA1

      7cf7dfee89c284cfd9c97af6c58787f7c65abed7

    • SHA256

      893571b91b0375f92e73bdaddc55e2f36a7f398e24f362219a5beced548679ac

    • SHA512

      59e048379ea37e2646a4ae5dcdbc548995dc61231cea40b96d1d790dd745c1b464a88602ef4bef776f6865844e6621a8b5e0a4092a472ce404fd9b456ab0b898

    • SSDEEP

      768:DE30Ur8/7tEaWcArSwaydTb0EroSd3QXGsBS4sZFFSUv6GfEK+RsWW2qTN4lvCyI:chdPeXonnUStQXDI4spvVp+N8NECtH3

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks