Overview

overview

10

Static

static

b3c4cd794c...0b.exe

windows7-x64

10

b3c4cd794c...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3c4cd794c34cd836c16c00133410c846476bbbf48761a40b72ceb5ae65b460b

  • Size

    122KB

  • Sample

    221202-1cq9pafc57

  • MD5

    6900a40663f94842ec2546855cd4ccc7

  • SHA1

    3a2f6b5ac454dbd8ecc5abe3c5bfabebb72d756c

  • SHA256

    b3c4cd794c34cd836c16c00133410c846476bbbf48761a40b72ceb5ae65b460b

  • SHA512

    f7d6f9902b4896f76fc6550d8c49eb295f79acc3c2ab7f58fc0507037c0941513d00f7f6d02ee370c37803246ba87106e9a550de4b914e854899a895869e02f9

  • SSDEEP

    1536:nFyzF9MFVCujlsQoeQZZ86ukpj0nGGF9v+4DR18hW:FyzQVCujl71QZZ4kp4F9Xt6hW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      b3c4cd794c34cd836c16c00133410c846476bbbf48761a40b72ceb5ae65b460b

    • Size

      122KB

    • MD5

      6900a40663f94842ec2546855cd4ccc7

    • SHA1

      3a2f6b5ac454dbd8ecc5abe3c5bfabebb72d756c

    • SHA256

      b3c4cd794c34cd836c16c00133410c846476bbbf48761a40b72ceb5ae65b460b

    • SHA512

      f7d6f9902b4896f76fc6550d8c49eb295f79acc3c2ab7f58fc0507037c0941513d00f7f6d02ee370c37803246ba87106e9a550de4b914e854899a895869e02f9

    • SSDEEP

      1536:nFyzF9MFVCujlsQoeQZZ86ukpj0nGGF9v+4DR18hW:FyzQVCujl71QZZ4kp4F9Xt6hW

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks