Overview

overview

10

Static

static

7db3417027...fb.exe

windows7-x64

10

7db3417027...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7db3417027c25554685c2e1e1969fffe50430fc4df0a0de5a87eddedc7c30afb

  • Size

    207KB

  • Sample

    221202-z8t5saeg82

  • MD5

    5c19718b648669786a64add70d710d7b

  • SHA1

    0e2109600075996223d64db2a02cb8fbc8e54ac6

  • SHA256

    7db3417027c25554685c2e1e1969fffe50430fc4df0a0de5a87eddedc7c30afb

  • SHA512

    7f618712429b3d4b55d45bb88009796fdde0ce9123add77c8da56a936f9d3cf73a4903eeb3157cf32be1f096356e5a046cb8b6ef4a7e4415a9ef7677960853ee

  • SSDEEP

    6144:bbl5RKgOGqml80FrgTRHGvJI08iYk//////////////////////////////////d:HIGqA80Fpv+08iYY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      7db3417027c25554685c2e1e1969fffe50430fc4df0a0de5a87eddedc7c30afb

    • Size

      207KB

    • MD5

      5c19718b648669786a64add70d710d7b

    • SHA1

      0e2109600075996223d64db2a02cb8fbc8e54ac6

    • SHA256

      7db3417027c25554685c2e1e1969fffe50430fc4df0a0de5a87eddedc7c30afb

    • SHA512

      7f618712429b3d4b55d45bb88009796fdde0ce9123add77c8da56a936f9d3cf73a4903eeb3157cf32be1f096356e5a046cb8b6ef4a7e4415a9ef7677960853ee

    • SSDEEP

      6144:bbl5RKgOGqml80FrgTRHGvJI08iYk//////////////////////////////////d:HIGqA80Fpv+08iYY

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks