Overview

overview

10

Static

static

a417499d4f...7b.exe

windows7-x64

10

a417499d4f...7b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a417499d4fef2561a8fe083bdf108ab46f40ba27ba0482f872479561a6d1ec7b

  • Size

    249KB

  • Sample

    221203-ykzvpaae56

  • MD5

    136b180d281f37ada4e0551a8fe575f3

  • SHA1

    3843c26e8efc39198273dd42063b3f832e4fcdd4

  • SHA256

    a417499d4fef2561a8fe083bdf108ab46f40ba27ba0482f872479561a6d1ec7b

  • SHA512

    11428d933a249d379e96f179a82bc177d1fe07c948f9094c68b2394a0a1c4c527da05bced4d97cd57a7eb4965c8e6db14110b3a511030aa9385fac79ce66d8df

  • SSDEEP

    6144:7PnkMwb+DWF3ayNbxB+m3dsYfNdPhTr4E6A3cK:TkMwb+DWYsq54d5TXPcK

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      a417499d4fef2561a8fe083bdf108ab46f40ba27ba0482f872479561a6d1ec7b

    • Size

      249KB

    • MD5

      136b180d281f37ada4e0551a8fe575f3

    • SHA1

      3843c26e8efc39198273dd42063b3f832e4fcdd4

    • SHA256

      a417499d4fef2561a8fe083bdf108ab46f40ba27ba0482f872479561a6d1ec7b

    • SHA512

      11428d933a249d379e96f179a82bc177d1fe07c948f9094c68b2394a0a1c4c527da05bced4d97cd57a7eb4965c8e6db14110b3a511030aa9385fac79ce66d8df

    • SSDEEP

      6144:7PnkMwb+DWF3ayNbxB+m3dsYfNdPhTr4E6A3cK:TkMwb+DWYsq54d5TXPcK

    Score
    10/10
    persistencediscovery

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks