Overview

overview

10

Static

static

d9663eba89...05.exe

windows7-x64

10

d9663eba89...05.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9663eba8977fd4647b1c3d418c533f41e87351f5aeeacd12e0cf19b574a8c05

  • Size

    157KB

  • Sample

    221202-bbqt4acc2t

  • MD5

    70a7c5b12b63588dd7b2ac55f8a099f9

  • SHA1

    55311125ec521e8ba8b9ba6944cfee1dea945f56

  • SHA256

    d9663eba8977fd4647b1c3d418c533f41e87351f5aeeacd12e0cf19b574a8c05

  • SHA512

    17d6c618e584fccbba35bc7aa832d0f7e68eb715cbbb593e4d7dba0d9b4db63bcb77585270451e9d4a1a909f74add84f52afc500f6b582e1faa3162953132911

  • SSDEEP

    3072:cW+HB89By2h4gE8x7KLm6NNZkVw1CNhOSX0A/axregoaWHiLbe:cW+HBuA2hNE8x7KLm6NNZkVwGhAkcreV

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      d9663eba8977fd4647b1c3d418c533f41e87351f5aeeacd12e0cf19b574a8c05

    • Size

      157KB

    • MD5

      70a7c5b12b63588dd7b2ac55f8a099f9

    • SHA1

      55311125ec521e8ba8b9ba6944cfee1dea945f56

    • SHA256

      d9663eba8977fd4647b1c3d418c533f41e87351f5aeeacd12e0cf19b574a8c05

    • SHA512

      17d6c618e584fccbba35bc7aa832d0f7e68eb715cbbb593e4d7dba0d9b4db63bcb77585270451e9d4a1a909f74add84f52afc500f6b582e1faa3162953132911

    • SSDEEP

      3072:cW+HB89By2h4gE8x7KLm6NNZkVw1CNhOSX0A/axregoaWHiLbe:cW+HBuA2hNE8x7KLm6NNZkVwGhAkcreV

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks