Overview

overview

8

Static

static

c564794db7...4e.exe

windows7-x64

8

c564794db7...4e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c564794db702720d4f036ed767b03ddbe014ffe6932e187146dfdf7797a4ef4e

  • Size

    368KB

  • Sample

    221203-1d79laff79

  • MD5

    57945b8ce75c97ea99c38c5777e974da

  • SHA1

    77e4943699d40eddf11d17b51c7dd3b58e1dd400

  • SHA256

    c564794db702720d4f036ed767b03ddbe014ffe6932e187146dfdf7797a4ef4e

  • SHA512

    02d85bf64341e0214ba8a9aeed0481365f4876bdabee7cb98d365ca668e7976120ccb8b1e87f77e5bac31b8c6e7633a9d5c23a7aa6a319009e6faa677698e5f7

  • SSDEEP

    6144:B6AS148eFyo7Y+OcZklufFNR7O2Vp36zUIYxwrAAQYmeynXluXW:/S1480yo7BuOFD7rgzUOcAQ5vXU

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      c564794db702720d4f036ed767b03ddbe014ffe6932e187146dfdf7797a4ef4e

    • Size

      368KB

    • MD5

      57945b8ce75c97ea99c38c5777e974da

    • SHA1

      77e4943699d40eddf11d17b51c7dd3b58e1dd400

    • SHA256

      c564794db702720d4f036ed767b03ddbe014ffe6932e187146dfdf7797a4ef4e

    • SHA512

      02d85bf64341e0214ba8a9aeed0481365f4876bdabee7cb98d365ca668e7976120ccb8b1e87f77e5bac31b8c6e7633a9d5c23a7aa6a319009e6faa677698e5f7

    • SSDEEP

      6144:B6AS148eFyo7Y+OcZklufFNR7O2Vp36zUIYxwrAAQYmeynXluXW:/S1480yo7BuOFD7rgzUOcAQ5vXU

    Score
    8/10
    evasionpersistence

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks