Overview

overview

10

Static

static

f5d3dcded4...ce.exe

windows7-x64

10

f5d3dcded4...ce.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5d3dcded4679e59a7dac3ddd1473c8ce197ea5b86533c48e3c84fd298a3c3ce

  • Size

    114KB

  • Sample

    221203-2xg27agh3w

  • MD5

    11b166b1ad1c4ec20d8d5f451a47bec5

  • SHA1

    cb83181b5a7e6d0794bb9fa77eac2a01ab141364

  • SHA256

    f5d3dcded4679e59a7dac3ddd1473c8ce197ea5b86533c48e3c84fd298a3c3ce

  • SHA512

    65ffeb700a313651fe42c28f54c2766eb2c5b1623a404f3cc092c0607eb6f74b6b1a01f608741510ed00e78df74dadde12229eb36ec55f05a0990c2b2149ca74

  • SSDEEP

    3072:/y3xG9uGQVwuWmWg9+P3to8VGIoInBGbLMHMb9/x1g:KhG9uGju9tcPdzSIAnF9J2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f5d3dcded4679e59a7dac3ddd1473c8ce197ea5b86533c48e3c84fd298a3c3ce

    • Size

      114KB

    • MD5

      11b166b1ad1c4ec20d8d5f451a47bec5

    • SHA1

      cb83181b5a7e6d0794bb9fa77eac2a01ab141364

    • SHA256

      f5d3dcded4679e59a7dac3ddd1473c8ce197ea5b86533c48e3c84fd298a3c3ce

    • SHA512

      65ffeb700a313651fe42c28f54c2766eb2c5b1623a404f3cc092c0607eb6f74b6b1a01f608741510ed00e78df74dadde12229eb36ec55f05a0990c2b2149ca74

    • SSDEEP

      3072:/y3xG9uGQVwuWmWg9+P3to8VGIoInBGbLMHMb9/x1g:KhG9uGju9tcPdzSIAnF9J2

    Score
    10/10
    evasionpersistence

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks